header-logo
Suggest Exploit
vendor:
Perl
by:
Unknown
7.5
CVSS
HIGH
Integer Overflow
190
CWE
Product Name: Perl
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE: Not specified
CPE: a:activestate:perl
Metasploit:
Other Scripts:
Platforms Tested: Not specified
Unknown

ActiveState Perl Integer Overflow Vulnerability

ActiveState Perl is prone to an integer overflow vulnerability. It occurs due to a lack of sufficient bounds checking on multiplier data passed to a Perl duplicator statement. This vulnerability allows an attacker to influence the execution flow of a vulnerable Perl script and execute arbitrary code. Failed exploit attempts will result in a denial of service.

Mitigation:

Apply the latest patches or updates from the vendor.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/10380/info

ActiveState Perl is reported to be prone to an integer overflow vulnerability. It is revealed through testing that other implementations are also vulnerable.

The issue is reported to exist due to a lack of sufficient bounds checking that is performed on multiplier data that is passed to a Perl duplicator statement. This vulnerability may permit an attacker to influence execution flow of a vulnerable Perl script to ultimately execute arbitrary code. Failed exploit attempts will result in a denial of service.

$var = "ABCD"x0x40000000;

Navigation

Suggest Exploit

Services By CQR