CVE-2004-2286 Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a....
HighCVSS 7.5
EPSS 8.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activestate activeperl | = 5.6.1 | No fix listed |
| activestate activeperl | = 5.6.1.630 | No fix listed |
| activestate activeperl | = 5.6.2 | No fix listed |
| activestate activeperl | = 5.6.3 | No fix listed |
| activestate activeperl | = 5.7.1 | No fix listed |
| activestate activeperl | = 5.7.2 | No fix listed |
| activestate activeperl | = 5.7.3 | No fix listed |
| activestate activeperl | = 5.8 | No fix listed |
| activestate activeperl | = 5.8.1 | No fix listed |
| activestate activeperl | = 5.8.3 | No fix listed |
| larry wall perl | = 5.3 | No fix listed |
| larry wall perl | = 5.4 | No fix listed |
| larry wall perl | = 5.4.5 | No fix listed |
| larry wall perl | = 5.5 | No fix listed |
| larry wall perl | = 5.5.3 | No fix listed |
| larry wall perl | = 5.6 | No fix listed |
| larry wall perl | = 5.6.1 | No fix listed |
| larry wall perl | = 5.8.0 | No fix listed |
| larry wall perl | = 5.8.1 | No fix listed |
| larry wall perl | = 5.8.3 | No fix listed |
References
- 20040517 RE: [Full-Disclosure] Buffer Overflow in ActivePerl ? mailing-list
- 10380 exploit vdb-entry
- perl-duplication-bo(16224) vdb-entry