NVD

Id
69600  
Name
CVE-2005-3962  
Description
Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-12-01  
Modified Date
2016-10-17  
Seq
2005-3962  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
359766 69600 CVE-2005-3962 ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/007_perl.patch  View
359767 69600 CVE-2005-3962 ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/001_perl.patch  View
359768 69600 CVE-2005-3962 20060101-01-U  View
359769 69600 CVE-2005-3962 CLSA-2006:1056  View
359770 69600 CVE-2005-3962 http://docs.info.apple.com/article.html?artnum=304829  View
359771 69600 CVE-2005-3962 APPLE-SA-2006-11-28  View
359772 69600 CVE-2005-3962 20051201 Perl format string integer wrap vulnerability  View
359773 69600 CVE-2005-3962 oval:org.mitre.oval:def:10598  View
359774 69600 CVE-2005-3962 oval:org.mitre.oval:def:1074  View
359775 69600 CVE-2005-3962 102192  View
359776 69600 CVE-2005-3962 http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm  View
359777 69600 CVE-2005-3962 DSA-943  View
359778 69600 CVE-2005-3962 http://www.dyadsecurity.com/perl-0002.html  View
359779 69600 CVE-2005-3962 GLSA-200512-01  View
359780 69600 CVE-2005-3962 http://www.ipcop.org/index.php?name=News&file=article&sid=41  View
359781 69600 CVE-2005-3962 VU#948385  View
359782 69600 CVE-2005-3962 MDKSA-2005:225  View
359783 69600 CVE-2005-3962 SUSE-SR:2005:029  View
359784 69600 CVE-2005-3962 SUSE-SA:2005:071  View
359785 69600 CVE-2005-3962 [3.7] 20060105 007: SECURITY FIX: January 5, 2006  View
359786 69600 CVE-2005-3962 OpenPKG-SA-2005.025  View
359787 69600 CVE-2005-3962 RHSA-2005:880  View
359788 69600 CVE-2005-3962 RHSA-2005:881  View
359789 69600 CVE-2005-3962 20051201 Perl format string integer wrap vulnerability  View
359790 69600 CVE-2005-3962 SSRT061105  View
359791 69600 CVE-2005-3962 15629  View
359792 69600 CVE-2005-3962 TSLSA-2005-0070  View
359793 69600 CVE-2005-3962 USN-222-1  View
359794 69600 CVE-2005-3962 TA06-333A  View
359795 69600 CVE-2005-3962 ADV-2005-2688  View
359796 69600 CVE-2005-3962 ADV-2006-0771  View
359797 69600 CVE-2005-3962 ADV-2006-2613  View
359798 69600 CVE-2005-3962 ADV-2006-4750  View
359799 69600 CVE-2005-3962 FLSA-2006:176731  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62508 JVNDB-2005-000710 Perl の Perl_sv_vcatpvfn() 関数における整数オーバーフローの脆弱性 Perl には、sv.c の Perl_sv_vcatpvfn() 関数において、フォーマット記述子を含む過度に大きな引数を適切に処理しないため、整数オーバーフローが発生する脆弱性が存在します。 CVE-2005-3962 15164 CVE-2005-3962 69600 4.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000710.html 2005-11-29 2007-04-01 View