Just received a security advisory for Perl.  Any word on an ActiveState
vulnerability?

>- --------------------------------------------------------------------------
>Debian Security Advisory DSA 943-1                     [EMAIL PROTECTED]
>http://www.debian.org/security/                             Martin Schulze
>January 16th, 2006                      http://www.debian.org/security/faq
>- --------------------------------------------------------------------------
>
>Package        : perl
>Vulnerability  : integer overflow
>Problem type   : local (remote)
>Debian-specific: no
>CVE ID         : CVE-2005-3962
>Debian Bug     : 341542
>
>Jack Louis discovered an integer overflow in Perl, Larry Wall's
>Practical Extraction and Report Language, that allows attackers to
>overwrite arbitrary memory and possibly execute arbitrary code via
>specially crafted content that is passed to vulnerable format strings
>of third party software.


--
REMEMBER THE WORLD TRADE CENTER         ---=< WTC 911 >=--
"...ne cede malis"

00000100

_______________________________________________
Perl-Win32-Users mailing list
[email protected]
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

Reply via email to