CVE-2011-10043
CriticalCVSS 9.8Summary
Vulnerability in Module::Load for Perl before version 0.22 allows arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary code.
Risk Assessment
The risk involves potential remote code execution by an attacker who can control module names loaded by the application. This could lead to system compromise or data integrity violation.
Recommendation
Immediately update Module::Load to version 0.22 or later. Also verify that no dependent modules are vulnerable to this attack.
Original NVD description (English source)
Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary code.