ActivePerl 5.8.x and others, and Larry Walls Perl 5.6.1 and others, when running on Windows systems, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the system command, which leads to a stack-based buffer overflow. NOTE: it is unclear whether this bug is in Perl or the OS API that is used by Perl.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Activeperl | Activestate | 5.6.1 (including) | 5.6.1 (including) |
| Activeperl | Activestate | 5.6.1.630 (including) | 5.6.1.630 (including) |
| Activeperl | Activestate | 5.6.2 (including) | 5.6.2 (including) |
| Activeperl | Activestate | 5.6.3 (including) | 5.6.3 (including) |
| Activeperl | Activestate | 5.7.1 (including) | 5.7.1 (including) |
| Activeperl | Activestate | 5.7.2 (including) | 5.7.2 (including) |
| Activeperl | Activestate | 5.7.3 (including) | 5.7.3 (including) |
| Activeperl | Activestate | 5.8 (including) | 5.8 (including) |