SecurityFocus

Buffer Overflow in ActivePerl ? May 17 2004 08:23PM
Oliver (at) greyhat (dot) de [email concealed] (Oliver greyhat de) (3 replies)

hi folks,

i played around with ActiveState's ActivePerl for Win32, and crashed
Perl.exe with the following command:

perl -e "$a="A" x 256; system($a)"

I wonder if this bug isnt known?!? Because system() is a very common
command....
Can anybody reproduce this?

I put together a little advisory on my website, including version
information and a debugger output (Drwatson):

http://www.oliverkarow.de/research/ActivePerlSystemBOF.txt

PS: Due to travel activity, i will not be able to respond to mails
within the next 8 days!

Regards,

Oliver

[ reply ]

Re: Buffer Overflow in ActivePerl ? May 18 2004 01:29PM
Nick FitzGerald (nick virus-l demon co uk)

Re: Buffer Overflow in ActivePerl? May 18 2004 09:03AM
Axel Beckert (beckert ecos de)

Re: Buffer Overflow in ActivePerl ? May 18 2004 12:58AM
rich sf lclogic com (2 replies)

Re: Buffer Overflow in ActivePerl ? May 18 2004 08:37PM
Josh Tolley (josh raintreeinc com)

RE: [Full-Disclosure] Re: Buffer Overflow in ActivePerl ? May 18 2004 11:22AM
Bill Royds (full-disclosure royds net)