CVE Vulnerabilities

CVE-2004-2286

Published: Dec 31, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a buffer overflow.

Affected Software

Name Vendor Start Version End Version
Activeperl Activestate 5.6.1 5.6.1
Activeperl Activestate 5.6.1.630 5.6.1.630
Activeperl Activestate 5.6.2 5.6.2
Activeperl Activestate 5.6.3 5.6.3
Activeperl Activestate 5.7.1 5.7.1
Activeperl Activestate 5.7.2 5.7.2
Activeperl Activestate 5.7.3 5.7.3
Activeperl Activestate 5.8 5.8
Activeperl Activestate 5.8.1 5.8.1
Activeperl Activestate 5.8.3 5.8.3
Perl Larry_wall 5.3 5.3
Perl Larry_wall 5.4 5.4
Perl Larry_wall 5.4.5 5.4.5
Perl Larry_wall 5.5 5.5
Perl Larry_wall 5.5.3 5.5.3
Perl Larry_wall 5.6 5.6
Perl Larry_wall 5.6.1 5.6.1
Perl Larry_wall 5.8.0 5.8.0
Perl Larry_wall 5.8.1 5.8.1
Perl Larry_wall 5.8.3 5.8.3

References