PT-2017-12707
CVE-2017-12814
·
تاريخ النشر
2017-09-27
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Perl versions prior to 5.24.3-RC1
Perl versions 5.26.x prior to 5.26.1-RC1
Description
The issue is related to a stack-based buffer overflow in the CPerlHost::Add method. This method is located in the win32/perlhost.h file in Perl. The overflow can be triggered by a long environment variable, allowing attackers to execute arbitrary code.
Recommendations
For versions prior to 5.24.3-RC1, update to version 5.24.3-RC1 or later.
For versions 5.26.x prior to 5.26.1-RC1, update to version 5.26.1-RC1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾