CVE-2004-2022: activestate activeperl
Vulnerability summary
CVE-2004-2022 is a low (CVSS 2.1) vulnerability in activestate activeperl. EPSS estimates a 1.74% chance of exploitation in the next 30 days, higher than 77.3% of scored vulnerabilities. 4 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 0 · Duplicates 1Timeline
- 10-05-2005PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the system command, which leads to a stack-based buffer overflow. NOTE: it is unclear whether this bug is in Perl or the OS API that is used by Perl.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.74%
Chance of exploitation in the next 30 days
Percentile
77%
Versus all other CVEs
30-day change
0.00 pp
From 1.74% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (perlmonks.org)
Maturity: unknown
Exploit Reference (oliverkarow.de)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Activestate1 product
- activeperl5.6.1 | 5.6.1.630 | 5.6.2 | 5.6.3 | 5.7.1 | 5.7.2 | 5.7.3 | 5.8
1 vendor · 1 product