Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-189,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| dan_kogai | encode_module | 2.23 |
| dan_kogai | encode_module | 1.90 |
| dan_kogai | encode_module | 2.42 |
| perl | perl | 5.8.6 |
| perl | perl | 5.8.9 |
| perl | perl | 5.13.0 |
| perl | perl | 5.13.1 |
| dan_kogai | encode_module | 1.73 |
| dan_kogai | encode_module | 2.36 |
| dan_kogai | encode_module | 1.33 |
| perl | perl | 5.12.3 |
| perl | perl | 5.13.3 |
| dan_kogai | encode_module | * |
| dan_kogai | encode_module | 2.19 |
| dan_kogai | encode_module | 1.56 |
| dan_kogai | encode_module | 1.84 |
| dan_kogai | encode_module | 2.14 |
| dan_kogai | encode_module | 1.21 |
| perl | perl | 5.11.1 |
| dan_kogai | encode_module | 1.54 |
| dan_kogai | encode_module | 2.09 |
| perl | perl | 5.11.5 |
| dan_kogai | encode_module | 1.83 |
| dan_kogai | encode_module | 2.05 |
| dan_kogai | encode_module | 0.97 |
| dan_kogai | encode_module | 1.94 |
| dan_kogai | encode_module | 1.28 |
| dan_kogai | encode_module | 1.93 |
| dan_kogai | encode_module | 2.28 |
| perl | perl | 5.12.1 |
| dan_kogai | encode_module | 1.71 |
| dan_kogai | encode_module | 1.80 |
| dan_kogai | encode_module | 1.42 |
| perl | perl | 5.8.8 |
| dan_kogai | encode_module | 0.93 |
| dan_kogai | encode_module | 1.41 |
| dan_kogai | encode_module | 1.97 |
| dan_kogai | encode_module | 2.37 |
| perl | perl | 5.12.2 |
| perl | perl | 5.13.4 |
| dan_kogai | encode_module | 1.81 |
| dan_kogai | encode_module | 1.72 |
| perl | perl | 5.13.7 |
| perl | perl | 5.12.0 |
| dan_kogai | encode_module | 0.94 |
| dan_kogai | encode_module | 2.06 |
| dan_kogai | encode_module | 1.11 |
| dan_kogai | encode_module | 2.27 |
| dan_kogai | encode_module | 1.58 |
| perl | perl | 5.10.0 |
| dan_kogai | encode_module | 2.20 |
| dan_kogai | encode_module | 1.87 |
| dan_kogai | encode_module | 0.98 |
| dan_kogai | encode_module | 1.01 |
| dan_kogai | encode_module | 2.34 |
| dan_kogai | encode_module | 2.26 |
| perl | perl | 5.14.0 |
| perl | perl | 5.8.5 |
| dan_kogai | encode_module | 2.07 |
| dan_kogai | encode_module | 1.82 |
| perl | perl | 5.13.2 |
| dan_kogai | encode_module | 1.86 |
| dan_kogai | encode_module | 2.04 |
| dan_kogai | encode_module | 1.70 |
| dan_kogai | encode_module | 1.98 |
| dan_kogai | encode_module | 1.96 |
| dan_kogai | encode_module | 2.03 |
| dan_kogai | encode_module | 1.76 |
| dan_kogai | encode_module | 1.75 |
| dan_kogai | encode_module | 1.31 |
| dan_kogai | encode_module | 1.55 |
| dan_kogai | encode_module | 2.41 |
| dan_kogai | encode_module | 1.85 |
| dan_kogai | encode_module | 2.21 |
| perl | perl | 5.8.7 |
| perl | perl | 5.13.10 |
| dan_kogai | encode_module | 1.25 |
| dan_kogai | encode_module | 1.64 |
| perl | perl | 5.8.1 |
| dan_kogai | encode_module | 1.65 |
| perl | perl | 5.10.1 |
| perl | perl | 5.10 |
| dan_kogai | encode_module | 1.60 |
| dan_kogai | encode_module | 1.69 |
| dan_kogai | encode_module | 0.95 |
| perl | perl | 5.13.9 |
| dan_kogai | encode_module | 2.22 |
| perl | perl | 5.13.6 |
| dan_kogai | encode_module | 2.10 |
| dan_kogai | encode_module | 1.95 |
| dan_kogai | encode_module | 2.38 |
| dan_kogai | encode_module | 2.31 |
| perl | perl | 5.11.3 |
| dan_kogai | encode_module | 1.10 |
| dan_kogai | encode_module | 1.59 |
| dan_kogai | encode_module | 2.02 |
| dan_kogai | encode_module | 1.50 |
| dan_kogai | encode_module | 2.08 |
| perl | perl | 5.13.11 |
| dan_kogai | encode_module | 2.33 |
| dan_kogai | encode_module | 1.40 |
| dan_kogai | encode_module | 2.29 |
| perl | perl | 5.13.5 |
| dan_kogai | encode_module | 2.16 |
| perl | perl | 5.9.2 |
| dan_kogai | encode_module | 2.12 |
| dan_kogai | encode_module | 1.68 |
| dan_kogai | encode_module | 2.32 |
| dan_kogai | encode_module | 1.66 |
| dan_kogai | encode_module | 1.67 |
| dan_kogai | encode_module | 1.78 |
| dan_kogai | encode_module | 2.39 |
| perl | perl | 5.13.8 |
| dan_kogai | encode_module | 1.34 |
| dan_kogai | encode_module | 1.61 |
| dan_kogai | encode_module | 2.17 |
| dan_kogai | encode_module | 2.25 |
| dan_kogai | encode_module | 1.99 |
| dan_kogai | encode_module | 1.92 |
| dan_kogai | encode_module | 2.18 |
| dan_kogai | encode_module | 2.13 |
| dan_kogai | encode_module | 1.30 |
| dan_kogai | encode_module | 2.0 |
| dan_kogai | encode_module | 2.30 |
| dan_kogai | encode_module | 1.20 |
| perl | perl | 5.11.4 |
| perl | perl | 5.8.10 |
| perl | perl | 5.8.4 |
| dan_kogai | encode_module | 1.77 |
| dan_kogai | encode_module | 2.15 |
| perl | perl | 5.11.0 |
| dan_kogai | encode_module | 1.26 |
| dan_kogai | encode_module | 1.62 |
| dan_kogai | encode_module | 1.00 |
| dan_kogai | encode_module | 2.35 |
| perl | perl | 5.8.3 |
| dan_kogai | encode_module | 1.91 |
| perl | perl | 5.8.2 |
| perl | perl | 5.11.2 |
| dan_kogai | encode_module | 0.96 |
| perl | perl | * |
| dan_kogai | encode_module | 1.63 |
| dan_kogai | encode_module | 1.51 |
| dan_kogai | encode_module | 1.74 |
| dan_kogai | encode_module | 2.40 |
| dan_kogai | encode_module | 1.52 |
| dan_kogai | encode_module | 1.88 |
| dan_kogai | encode_module | 1.53 |
| dan_kogai | encode_module | 1.32 |
| dan_kogai | encode_module | 0.99 |
| dan_kogai | encode_module | 1.79 |
| dan_kogai | encode_module | 1.89 |
| dan_kogai | encode_module | 2.01 |
| dan_kogai | encode_module | 2.11 |
| perl | perl | 5.14.1 |
| dan_kogai | encode_module | 1.57 |
| dan_kogai | encode_module | 2.24 |