CVE-2004-2286
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
31/12/2004
Last modified:
03/04/2025
Description
Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a buffer overflow.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:activestate:activeperl:5.6.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:activestate:activeperl:5.6.1.630:*:*:*:*:*:*:* | ||
cpe:2.3:a:activestate:activeperl:5.6.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:activestate:activeperl:5.6.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:activestate:activeperl:5.7.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:activestate:activeperl:5.7.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:activestate:activeperl:5.7.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:activestate:activeperl:5.8:*:*:*:*:*:*:* | ||
cpe:2.3:a:activestate:activeperl:5.8.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:activestate:activeperl:5.8.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:larry_wall:perl:5.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:larry_wall:perl:5.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:larry_wall:perl:5.4.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:larry_wall:perl:5.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:larry_wall:perl:5.5.3:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0878.html
- http://www.securityfocus.com/bid/10380
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16224
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0878.html
- http://www.securityfocus.com/bid/10380
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16224