CVE-2004-2022: Activestate Activeperl

Low severity, CVSS 2.1. EPSS: 1.7% chance of exploitation in the next 30 days.

ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the system command, which leads to a stack-based buffer overflow. NOTE: it is unclear whether this bug is in Perl or the OS API that is used by Perl.

Affected products

• Activestate Activeperl: version 5.6.1 only; version 5.6.1.630 only; version 5.6.2 only; version 5.6.3 only; version 5.7.1 only; version 5.7.2 only; …

Published 2004-12-31. Last modified 2026-06-16.