CVE-2005-3962 | BDVDB-2026-13731 Detail
Description#
Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.vupen.com/english/advisories/2006/4750
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1074
- http://www.kb.cert.org/vuls/id/948385
- http://www.osvdb.org/22255
- http://secunia.com/advisories/17941
- http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm
- http://www.securityfocus.com/archive/1/418333/100/0/threaded
- http://www.securityfocus.com/archive/1/438726/100/0/threaded
- http://marc.info/?l=full-disclosure&m=113342788118630&w=2
- http://www.vupen.com/english/advisories/2005/2688
- http://www.dyadsecurity.com/perl-0002.html
- http://www.osvdb.org/21345
- http://www.securityfocus.com/bid/15629
- http://www.redhat.com/support/errata/RHSA-2005-881.html
- http://docs.info.apple.com/article.html?artnum=304829
Show all 40
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10598
- http://www.debian.org/security/2006/dsa-943
- http://www.openbsd.org/errata37.html#perl
- http://secunia.com/advisories/17993
- http://secunia.com/advisories/18075
- https://www.redhat.com/archives/fedora-legacy-announce/2006-February/msg00008.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056
- http://www.openpkg.org/security/OpenPKG-SA-2005.025-perl.html
- http://www.vupen.com/english/advisories/2006/0771
- http://secunia.com/advisories/20894
- https://usn.ubuntu.com/222-1/
- http://www.vupen.com/english/advisories/2006/2613
- http://secunia.com/advisories/18413
- http://secunia.com/advisories/23155
- http://secunia.com/advisories/17762
- http://secunia.com/advisories/18187
- http://www.trustix.org/errata/2005/0070
- http://secunia.com/advisories/18517
- http://secunia.com/advisories/18295
- http://www.novell.com/linux/security/advisories/2005_71_perl.html
- http://secunia.com/advisories/18183
- http://www.redhat.com/support/errata/RHSA-2005-880.html
- http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
- http://www.us-cert.gov/cas/techalerts/TA06-333A.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102192-1
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.