CVE-2023-47039 — Heap-based Buffer Overflow in Perl
Severity
7.8HIGHNVD
EPSS
0.1%
top 76.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Timeline
PublishedJan 2
Latest updateNov 14
Description
A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell (`cmd.exe`). When running an executable that uses the Windows Perl interpreter, Perl attempts to find and execute `cmd.exe` within the operating system. However, due to path search order issues, Perl initially looks for cmd.exe in the current working directory. This flaw allows an attacker with limited privileges to place`cmd.exe` in locations with…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9