CVE-2017-12814 PUBLISHED CVSS 7.5 HIGH

Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute arbitrary code via a long environment variable.

EPSS 6.06% · 90.7th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
6.06%
90.7th percentile

Affected Products

VendorProductVersions
perlperl0, 5.26.0
n/an/an/a

Timeline

References

Open in Interactive Console →