Unrated severityNVD Advisory· Published Dec 1, 2005· Updated Jun 16, 2026
CVE-2005-3962
CVE-2005-3962
Description
Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:perl:perl:5.8.6:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:perl:perl:5.8.6:*:*:*:*:*:*:*
- cpe:2.3:a:perl:perl:5.9.2:*:*:*:*:*:*:*
- (no CPE)range: 5.8.6, 5.9.2
Patches
Vulnerability mechanics
References
52- www.dyadsecurity.com/perl-0002.htmlnvdPatchVendor Advisory
- secunia.com/advisories/17762nvdVendor Advisory
- secunia.com/advisories/17802nvdVendor Advisory
- secunia.com/advisories/17844nvdVendor Advisory
- secunia.com/advisories/17941nvdVendor Advisory
- secunia.com/advisories/17952nvdVendor Advisory
- secunia.com/advisories/17993nvdVendor Advisory
- secunia.com/advisories/18075nvdVendor Advisory
- secunia.com/advisories/18183nvdVendor Advisory
- secunia.com/advisories/18187nvdVendor Advisory
- secunia.com/advisories/18295nvdVendor Advisory
- secunia.com/advisories/18413nvdVendor Advisory
- secunia.com/advisories/18517nvdVendor Advisory
- secunia.com/advisories/19041nvdVendor Advisory
- secunia.com/advisories/20894nvdVendor Advisory
- secunia.com/advisories/23155nvdVendor Advisory
- secunia.com/advisories/31208nvdVendor Advisory
- www.redhat.com/support/errata/RHSA-2005-880.htmlnvdVendor Advisory
- www.redhat.com/support/errata/RHSA-2005-881.htmlnvdVendor Advisory
- www.vupen.com/english/advisories/2006/2613nvdVendor Advisory
- www.kb.cert.org/vuls/id/948385nvdUS Government Resource
- www.us-cert.gov/cas/techalerts/TA06-333A.htmlnvdUS Government Resource
- ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/007_perl.patchnvd
- ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/001_perl.patchnvd
- patches.sgi.com/support/free/security/advisories/20060101-01-Unvd
- distro.conectiva.com.br/atualizacoes/nvd
- docs.info.apple.com/article.htmlnvd
- lists.apple.com/archives/security-announce/2006/Nov/msg00001.htmlnvd
- marc.infonvd
- sunsolve.sun.com/search/document.donvd
- support.avaya.com/elmodocs2/security/ASA-2006-081.htmnvd
- www.debian.org/security/2006/dsa-943nvd
- www.gentoo.org/security/en/glsa/glsa-200512-01.xmlnvd
- www.ipcop.org/index.phpnvd
- www.mandriva.com/security/advisoriesnvd
- www.novell.com/linux/security/advisories/2005_29_sr.htmlnvd
- www.novell.com/linux/security/advisories/2005_71_perl.htmlnvd
- www.openbsd.org/errata37.htmlnvd
- www.openpkg.org/security/OpenPKG-SA-2005.025-perl.htmlnvd
- www.osvdb.org/21345nvd
- www.osvdb.org/22255nvd
- www.securityfocus.com/archive/1/418333/100/0/threadednvd
- www.securityfocus.com/archive/1/438726/100/0/threadednvd
- www.securityfocus.com/bid/15629nvd
- www.trustix.org/errata/2005/0070nvd
- www.vupen.com/english/advisories/2005/2688nvd
- www.vupen.com/english/advisories/2006/0771nvd
- www.vupen.com/english/advisories/2006/4750nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10598nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1074nvd
- usn.ubuntu.com/222-1/nvd
- www.redhat.com/archives/fedora-legacy-announce/2006-February/msg00008.htmlnvd
News mentions
0No linked articles in our index yet.