VDB

DEBIAN-CVE-2005-3962

DEBIAN-CVE-2005-3962 PUBLISHED CVSS 9.300000190734863 CRITICAL

Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.

Risk Scores

CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
Debian:14perl0, 0, 0
Debian:11perl0, 0, 0
Debian:12perl0, 0, 0
Debian:13perl0, 0, 0

Timeline

  • Dec 1, 2005 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›