CVE-2001-0815

CVE-2001-0815 describes a buffer overflow in ActiveState ActivePerl’s PerlIS.dll (ActivePerl 5.6.1.629 and earlier) that allows remote code execution via an overlong HTTP request for a filename ending in .pl. The vulnerability exists in the IIS ISAPI extension (perlIS.dll) and is triggered by ins...

CVE-2004-0377

CVE-2004-0377: A buffer overflow in the win32_stat wrapper used by ActivePerl (ActiveState) and Larry Wall’s Perl up to 5.8.3 allows local or remote code execution when a filename ends with a backslash. Exploitation depends on how the vulnerable Perl is used by an application; Windows environment...

CVE-2012-5377

CVE-2012-5377 is an untrusted search path vulnerability in ActivePerl 5.16.1.1601 when installed in the top-level C:\ directory. The installation places a Trojan horse DLL in C:\Perl\Site\bin, which is added to PATH and can be used by a local attacker to gain privileges via a missing DLL (wlbsctr...

CVE-2004-2286

CVE-2004-2286 maps to an integer overflow in ActivePerl’s duplication operator, enabling remote DoS and potentially arbitrary code execution via a large multiplier. Affected: ActivePerl 5.x up to 5.8.3 and earlier. Root cause: overflow during duplication. Impact: Denial of service and possible co...

CVE-2006-2856

ActivePerl 5.8.8.817 for Windows is affected. The vulnerability arises from configuring the site/lib directory with write access to the Users group, allowing local users to create a malicious sitecustomize.pl and escalate privileges. The available sources describe the root cause and impact as loc...

CVE-2004-2022

ActivePerl 5.8.x and Perl 5.6.1 (Windows) are affected by CVE-2004-2022, allowing a denial of service (crash) and potentially arbitrary code execution via a long argument to the system() command, due to a stack-based buffer overflow. The root cause is unclear whether the flaw lies in Perl or the ...