CVE-2012-6143

Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...

CVE-2012-6142

Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...

CVE-2012-6143

Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...

PT-2014-2374

Name of the Vulnerable Software and Affected Versions App::Context versions 0.01 through 0.968 Description The issue arises from the improper use of the Storable::thaw function in the App::Context module for Perl. This allows remote attackers to execute arbitrary code via a crafted request to API...

PT-2014-2375

Name of the Vulnerable Software and Affected Versions HTML::EP module versions 0.2011 Description The issue arises from the improper use of the Storable::thaw function in the Session::Cookie component of the HTML::EP module for Perl. This allows remote attackers to execute arbitrary code via a...

PT-2014-2376

Name of the Vulnerable Software and Affected Versions Spoon module version 0.24 Description The issue arises from improper use of the Storable::thaw function in the Spoon::Cookie component of the Spoon module for Perl. This allows remote attackers to execute arbitrary code by sending a crafted...

CVE-2012-6141: Improper Control of Generation of Code

The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to 1 App::Session::Cookie or 2 App::Session::HTMLHidden, which is not properly handled when it is deserialized...

CVE-2012-6142: Improper Control of Generation of Code

Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...

CVE-2012-6143: Improper Control of Generation of Code

Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...

Movable Type 5.2.X < 5.2.6 Unspecified Vulnerability

According to its version number, the Movable Type install hosted on the remote web server is affected by an unspecified flaw when the 'commentstate' function is processed by the 'unserialize' function. This flaw is due to an issue with the Perl 'Storable::thaw' function, which is considered unsaf...

CVE-2003-0791

CVE-2003-0791 affects Mozilla 1.4 and earlier, where Script.prototype.freeze/thaw can be abused: by altering the string given to script.thaw, input is deserialized and native methods may be executed. The connected records consistently reference Mozilla 1.4 and earlier as vulnerable, with the issu...

CVE-2003-0791: Deserialization of Untrusted Data

The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed...

PT-2003-1880 · Mozilla · Mozilla Firefox

Name of the Vulnerable Software and Affected Versions: Mozilla versions 1.4 and earlier Description: The issue allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed. This is related to the...