CVE-2004-2286
NONE EPSS 94.1%
Published Dec 31, 200421y ago · Modified Jun 16, 20262w ago
Published Dec 31, 2004 21y ago
Last Modified Jun 16, 2026 2w ago
Description
Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a buffer overflow.
Threat Intelligence
EPSS Exploit Probability
94.1% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Affected Products 20
| Vendor | Product | Version | Range |
|---|---|---|---|
| activestate | activeperl | 5.6.1 | any |
| activestate | activeperl | 5.6.1.630 | any |
| activestate | activeperl | 5.6.2 | any |
| activestate | activeperl | 5.6.3 | any |
| activestate | activeperl | 5.7.1 | any |
| activestate | activeperl | 5.7.2 | any |
| activestate | activeperl | 5.7.3 | any |
| activestate | activeperl | 5.8 | any |
| activestate | activeperl | 5.8.1 | any |
| activestate | activeperl | 5.8.3 | any |
| larry_wall | perl | 5.3 | any |
| larry_wall | perl | 5.4 | any |
| larry_wall | perl | 5.4.5 | any |
| larry_wall | perl | 5.5 | any |
| larry_wall | perl | 5.5.3 | any |
| larry_wall | perl | 5.6 | any |
| larry_wall | perl | 5.6.1 | any |
| larry_wall | perl | 5.8.0 | any |
| larry_wall | perl | 5.8.1 | any |
| larry_wall | perl | 5.8.3 | any |
References 3
- archives.neohapsis.com http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0878.html
- securityfocus.com http://www.securityfocus.com/bid/10380
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/16224
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.