CVE-2017-12814

Critical

Published: 28/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before version 5.24.3-RC1 and 5.26.x before version 5.26.1-RC1 allows attackers to execute arbitrary code via a long environment variable.

Risk Assessment

This vulnerability may lead to remote code execution, posing a serious security threat to systems using vulnerable versions of Perl on Windows.

Recommendation

It is recommended to update Perl to version 5.24.3-RC1 or 5.26.1-RC1 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute arbitrary code via a long environment variable.