[Bug 884354] CVE-2012-6329 perl: possible arbitrary code execution via Locale::Maketext

bugzilla at redhat.com bugzilla at redhat.com
Tue Mar 5 10:12:56 UTC 2013


Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=884354

--- Comment #15 from Petr Pisar <ppisar at redhat.com> ---
Created attachment 705351
  --> https://bugzilla.redhat.com/attachment.cgi?id=705351&action=edit
Partial reproducer

This code based on the Template attachment demonstrates calling function from
other module (POSIX::printf() in this case).

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=qKkXOBqGpy&a=cc_unsubscribe



More information about the perl-devel mailing list