← back
CVE-2004-2022

CVE-2004-2022

EPSS 1.7%
ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the system command, which leads to a stack-based buffer overflow. NOTE: it is unclear whether this bug is in Perl or the OS API that is used by Perl.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/24128unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0905.htmlhttp://marc.info/?l=bugtraq&m=108489894009025&w=2http://marc.info/?l=full-disclosure&m=108482796105922&w=2http://marc.info/?l=full-disclosure&m=108483058514596&w=2http://marc.info/?l=full-disclosure&m=108489112131099&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/16169http://www.oliverkarow.de/research/ActivePerlSystemBOF.txthttp://www.perlmonks.org/index.pl?node_id=354145http://www.securityfocus.com/bid/10375