Vulnerability Details CVE-2004-2286
Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a buffer overflow.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.075
EPSS Ranking 91.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0878.html
- http://www.securityfocus.com/bid/10380
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16224
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0878.html
- http://www.securityfocus.com/bid/10380
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16224
Products affected by CVE-2004-2286
-
cpe:2.3:a:activestate:activeperl:5.6.1
-
cpe:2.3:a:activestate:activeperl:5.6.1.630
-
cpe:2.3:a:activestate:activeperl:5.6.2
-
cpe:2.3:a:activestate:activeperl:5.6.3
-
cpe:2.3:a:activestate:activeperl:5.7.1
-
cpe:2.3:a:activestate:activeperl:5.7.2
-
cpe:2.3:a:activestate:activeperl:5.7.3
-
cpe:2.3:a:activestate:activeperl:5.8
-
cpe:2.3:a:activestate:activeperl:5.8.1
-
cpe:2.3:a:activestate:activeperl:5.8.3
-
cpe:2.3:a:larry_wall:perl:5.3
-
cpe:2.3:a:larry_wall:perl:5.4
-
cpe:2.3:a:larry_wall:perl:5.4.5
-
cpe:2.3:a:larry_wall:perl:5.5
-
cpe:2.3:a:larry_wall:perl:5.5.3
-
cpe:2.3:a:larry_wall:perl:5.6
-
cpe:2.3:a:larry_wall:perl:5.6.1
-
cpe:2.3:a:larry_wall:perl:5.8.0
-
cpe:2.3:a:larry_wall:perl:5.8.1
-
cpe:2.3:a:larry_wall:perl:5.8.3