CVEvulnerability

CVE-2005-3962

4.6 MEDIUM Published 2005-12-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-189

Description

Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.

Affected configurations

• perl perl 5.8.6 • perl perl 5.9.2

Related

Weakness · not in database (1)

References