CVE-2004-0377: Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl befor...

Security readout for executives and security teams

This old Windows Perl issue allows specially shaped filenames to trigger a buffer overflow in Perl's win32_stat function. The reported impact is arbitrary command execution. Business risk depends on whether legacy Windows systems still run affected ActivePerl or Perl versions before 5.8.3. Likely exposure is limited to legacy Windows environments running affected ActivePerl or Perl before 5.8.3, especially where Perl handles untrusted filenames. Modern supported Perl deployments are less likely affected, but inventories should confirm exact Windows Perl versions. Prioritize as high for any business-critical or externally reachable legacy Windows Perl systems. For environments without old Windows Perl, urgency is low after inventory confirms absence. Mitigation focus: Inventory Windows systems running ActivePerl or Perl.; Upgrade Perl deployments to 5.8.3 or later where applicable.; Check ActiveState guidance for affected ActivePerl builds and patches..

Prepared

Jun 30, 2026, 06:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.