7.5
CVSSv2

CVE-2012-5195

Published: 18/12/2012 Updated: 08/12/2016
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 790
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x prior to 5.12.5, 5.14.x prior to 5.14.3, and 5.15.x prior to 15.15.5 allows context-dependent malicious users to cause a denial of service (memory consumption and crash) or possibly execute arbitrary code via the 'x' string repeat operator.

Vulnerable Product Search on Vulmon Subscribe to Product

perl perl 5.12.0

perl perl 5.12.1

perl perl 5.14.0

perl perl 5.12.2

perl perl 5.12.3

perl perl 5.12.4

perl perl 5.14.1

perl perl 5.14.2

Vendor Advisories

Synopsis Moderate: perl security update Type/Severity Security Advisory: Moderate Topic Updated perl packages that fix multiple security issues now availablefor Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as havingmoderate security impact Common Vulnerability S ...
Perl programs could be made to crash or run programs if they receive specially crafted network traffic or other input ...
Debian Bug report logs - #689314 perl: segfaults when echoing a very long string [CVE-2012-5195] Package: perl; Maintainer for perl is Niko Tyni <ntyni@debianorg>; Source for perl is src:perl (PTS, buildd, popcon) Reported by: Thorsten Glaser <tg@mirbsdde> Date: Mon, 1 Oct 2012 14:12:01 UTC Severity: grave Tags: ...
Debian Bug report logs - #693420 CVE-2012-5526 CGIpm: Newline injection due to improper CRLF escaping in Set-Cookie and P3P headers Package: perl-modules; Maintainer for perl-modules is Niko Tyni <ntyni@debianorg>; Source for perl-modules is src:perl (PTS, buildd, popcon) Reported by: Salvatore Bonaccorso <carnil@debian ...
Two vulnerabilities were discovered in the implementation of the Perl programming language: CVE-2012-5195 The x operator could cause the Perl interpreter to crash if very long strings were created CVE-2012-5526 The CGI module does not properly escape LF characters in the Set-Cookie and P3P headers In addition, this update adds a ...
A heap overflow flaw was found in Perl If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application (CVE-2012-5195) A denial of service flaw was found in the way ...