Re: Buffer Overflow in ActivePerl ?

[Josh Tolley <josh () raintreeinc com>]

Also reproduced in perl v5.8.0 build 806 on WinXP Pro.

rich.sf () lclogic com wrote:

> Reproduced with 5.6.1/win95.
>
> On Mon, 17 May 2004, Oliver () greyhat de wrote:
>
>  
>
> > Date: Mon, 17 May 2004 22:23:56 +0200
> > From: "Oliver () greyhat de" <Oliver () greyhat de>
> > To: full-disclosure () lists netsys com
> > Cc: bugtraq () securityfocus com
> > Subject: Buffer Overflow in ActivePerl ?
> >
> > hi folks,
> >
> > i played around with ActiveState's ActivePerl for Win32, and crashed
> > Perl.exe with the following command:
> >
> > perl -e "$a="A" x 256; system($a)"
> >
> > I wonder if this bug isnt known?!? Because system() is a very common
> > command....
> > Can anybody reproduce this?
> >
> > I put together a little advisory on my website, including version
> > information and a debugger output (Drwatson):
> >
> >    http://www.oliverkarow.de/research/ActivePerlSystemBOF.txt
> >
> >
> > PS:  Due to travel activity, i will not be able to respond to mails
> > within the next 8 days!
> >
> > Regards,
> >
> > Oliver
> >
> >