PT-2009-1121 · Perl · Perl
Warren Togami
·
Publicado
2009-10-29
·
Atualizado
2017-08-17
·
CVE-2009-3626
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Perl version 5.10.1
Description
The issue is related to errors in resource release in the Perl programming language interpreter. It may allow a remote attacker to cause a denial of service. Specifically, the problem arises when a UTF-8 character with a large, invalid codepoint is not properly handled during a regular-expression match, potentially leading to an application crash.
Recommendations
For Perl version 5.10.1, consider disabling the use of UTF-8 characters with large codepoints in regular expressions until a patch is available. As a temporary workaround, restrict the input of UTF-8 characters to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Resource Release
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Perl