ActivePerl 5.x / Larry Wall Perl 5.x - Duplication Operator Integer Overflow Vulnerability

2004-05-18T00:00:00
ID EDB-ID:24130
Type exploitdb
Reporter Matt Murphy
Modified 2004-05-18T00:00:00

Description

ActivePerl 5.x,Larry Wall Perl 5.x Duplication Operator Integer Overflow Vulnerability. CVE-2004-2286 . Dos exploits for multiple platform

                                        
                                            source: http://www.securityfocus.com/bid/10380/info

ActiveState Perl is reported to be prone to an integer overflow vulnerability. It is revealed through testing that other implementations are also vulnerable.

The issue is reported to exist due to a lack of sufficient bounds checking that is performed on multiplier data that is passed to a Perl duplicator statement. This vulnerability may permit an attacker to influence execution flow of a vulnerable Perl script to ultimately execute arbitrary code. Failed exploit attempts will result in a denial of service.

$var = "ABCD"x0x40000000;