Exploit ActivePerl 5.x / Larry Wall Perl 5.x - Duplication Operator Integer Overflow

[Exploiter]

EDB-ID

24130

Проверка EDB

1. Пройдено

Автор

MATT MURPHY

Тип уязвимости

DOS

Платформа

MULTIPLE

CVE

cve-2004-2286

Дата публикации

2004-05-18

source: https://www.securityfocus.com/bid/10380/info

ActiveState Perl is reported to be prone to an integer overflow vulnerability. It is revealed through testing that other implementations are also vulnerable.

The issue is reported to exist due to a lack of sufficient bounds checking that is performed on multiplier data that is passed to a Perl duplicator statement. This vulnerability may permit an attacker to influence execution flow of a vulnerable Perl script to ultimately execute arbitrary code. Failed exploit attempts will result in a denial of service.

$var = "ABCD"x0x40000000;