CVE Catalog

CVE-2015-8608

Critical
Published: Translated: NVD NIST

Summary

The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a crafted (1) drive letter or (2) pInName argument.

Risk Assessment

Attackers may exploit this vulnerability to disrupt system operations or execute malicious code, posing a serious security threat to applications.

Recommendation

It is recommended to update to the latest version of Perl to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a crafted (1) drive letter or (2) pInName argument.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS