CVE-2004-2022
- State
- Published
- Severity
- Not scored
- Published
- May 10, 2005
- Updated
- Aug 8, 2024
- Reserved
- May 4, 2005
Description
ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the system command, which leads to a stack-based buffer overflow. NOTE: it is unclear whether this bug is in Perl or the OS API that is used by Perl.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- perl-system-bo(16169)vdb-entry
- http://www.perlmonks.org/index.pl?node_id=354145
- 20040518 Re: Buffer Overflow in ActivePerl ?mailing-list
- 20040518 RE: [Full-Disclosure] Re: Buffer Overflow in ActivePerl ?mailing-list
- http://www.oliverkarow.de/research/ActivePerlSystemBOF.txt
- 20040517 RE: Buffer Overflow in ActivePerl ?mailing-list
- 20040517 Buffer Overflow in ActivePerl ?mailing-list
- 10375vdb-entry
- 20040518 Re[2]: [Full-Disclosure] Buffer Overflow in ActivePerl ?mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.