CVE-2012-6329

Advisory lineage Upstream: 0 Downstream: 3
Modified
Published: 04 Jan 2013, 21:00
Last modified:06 Aug 2024, 21:28

Vulnerability Summary

Overall Risk (default)
high
56/100
CVSS Score
7.5 HIGH
v2.0 (nvd)
EPSS Score
81.97% CRITICAL
82% probability -1.38%
KEV
Not listed
Ransomware
No reports
Public exploits
4 found
Dark Web
Not detected

Timeline

04 Jan 2013, 21:00
Published
Vulnerability first disclosed
06 Aug 2024, 21:28
Last Modified
Vulnerability information updated

Description

The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.

CVSS Metrics

  • v2.0•HIGH•Score: 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 81.97%• Percentile: 99%

Techniques & Countermeasures

  • CWE-94•Improper Control of Generation of Code ('Code Injection')

    The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Affected Systems

  • perl•perl

    ≤ 5.16.2 | 5.10 | 5.10.0 | 5.10.0:rc1 | 5.10.0:rc2 | 5.10.1 | 5.10.1:rc1 | 5.10.1:rc2 | 5.11.0 | 5.11.1 | 5.11.2 | 5.11.3 | 5.11.4 | 5.11.5 | 5.12.0 | 5.12.0:rc0 | 5.12.0:rc1 | 5.12.0:rc2 | 5.12.0:rc3 | 5.12.0:rc4 | 5.12.0:rc5 | 5.12.1 | 5.12.1:rc1 | 5.12.1:rc2 | 5.12.2 | 5.12.2:rc1 | 5.12.3 | 5.12.3:rc1 | 5.12.3:rc2 | 5.12.3:rc3 | 5.13.0 | 5.13.1 | 5.13.2 | 5.13.3 | 5.13.4 | 5.13.5 | 5.13.6 | 5.13.7 | 5.13.8 | 5.13.9 | 5.13.10 | 5.13.11 | 5.14.0 | 5.14.0:rc1 | 5.14.0:rc2 | 5.14.0:rc3 | 5.14.1 | 5.14.2 | 5.14.3 | 5.16.0 | 5.16.1

References (17)