CVE-2005-3962 Integer overflow in n/a
Attackers can execute arbitrary code via integer overflow in Perl's format string functionality, affecting applications using vulnerable Perl versions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-3962?
CVE-2005-3962 is a medium-severity vulnerability in n/a, published on 1 Dec 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.
Weakness: CWE-189
Which versions are affected by CVE-2005-3962?
It affects 1 product.
Linux distribution packages (12)
perl Red Hat:enterprise_linux:4::as | All versions | 3:5.8.5-24.RHEL4 |
perl-debuginfo Red Hat:enterprise_linux:4::as | All versions | 3:5.8.5-24.RHEL4 |
perl-suidperl Red Hat:enterprise_linux:4::as | All versions | 3:5.8.5-24.RHEL4 |
perl Red Hat:enterprise_linux:4::desktop | All versions | 3:5.8.5-24.RHEL4 |
perl-debuginfo Red Hat:enterprise_linux:4::desktop | All versions | 3:5.8.5-24.RHEL4 |
perl-suidperl Red Hat:enterprise_linux:4::desktop | All versions | 3:5.8.5-24.RHEL4 |
perl Red Hat:enterprise_linux:4::es | All versions | 3:5.8.5-24.RHEL4 |
perl-debuginfo Red Hat:enterprise_linux:4::es | All versions | 3:5.8.5-24.RHEL4 |
perl-suidperl Red Hat:enterprise_linux:4::es | All versions | 3:5.8.5-24.RHEL4 |
perl Red Hat:enterprise_linux:4::ws | All versions | 3:5.8.5-24.RHEL4 |
perl-debuginfo Red Hat:enterprise_linux:4::ws | All versions | 3:5.8.5-24.RHEL4 |
perl-suidperl Red Hat:enterprise_linux:4::ws | All versions | 3:5.8.5-24.RHEL4 |
Products include Perl Perl.
How do I fix CVE-2005-3962?
Upgrade to a fixed version.
Is CVE-2005-3962 being exploited?
There is no known exploitation of CVE-2005-3962 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2005-3962, DSA-943-1, GHSA-x9vv-cmfc-4qwh, RHSA-2005:880.