CVE-2004-2286

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a buffer overflow.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:activestate:activeperl:5.6.1:*:*:*:*:*:*:*

cpe:2.3:a:activestate:activeperl:5.6.1.630:*:*:*:*:*:*:*

cpe:2.3:a:activestate:activeperl:5.6.2:*:*:*:*:*:*:*

cpe:2.3:a:activestate:activeperl:5.6.3:*:*:*:*:*:*:*

cpe:2.3:a:activestate:activeperl:5.7.1:*:*:*:*:*:*:*

cpe:2.3:a:activestate:activeperl:5.7.2:*:*:*:*:*:*:*

cpe:2.3:a:activestate:activeperl:5.7.3:*:*:*:*:*:*:*

cpe:2.3:a:activestate:activeperl:5.8:*:*:*:*:*:*:*

cpe:2.3:a:activestate:activeperl:5.8.1:*:*:*:*:*:*:*

cpe:2.3:a:activestate:activeperl:5.8.3:*:*:*:*:*:*:*

cpe:2.3:a:larry_wall:perl:5.3:*:*:*:*:*:*:*

cpe:2.3:a:larry_wall:perl:5.4:*:*:*:*:*:*:*

cpe:2.3:a:larry_wall:perl:5.4.5:*:*:*:*:*:*:*

cpe:2.3:a:larry_wall:perl:5.5:*:*:*:*:*:*:*

cpe:2.3:a:larry_wall:perl:5.5.3:*:*:*:*:*:*:*

cpe:2.3:a:larry_wall:perl:5.6:*:*:*:*:*:*:*

cpe:2.3:a:larry_wall:perl:5.6.1:*:*:*:*:*:*:*

cpe:2.3:a:larry_wall:perl:5.8.0:*:*:*:*:*:*:*

cpe:2.3:a:larry_wall:perl:5.8.1:*:*:*:*:*:*:*

cpe:2.3:a:larry_wall:perl:5.8.3:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.2493

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-8g3v-vx3x-982v

github

почти 4 года назад