Secunia

Tavis Ormandy and Will Drewry have reported a vulnerability in Perl, which potentially can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the processing of regular expressions containing Unicode data. This can be exploited to cause a buffer overflow via a specially crafted regular expression causing a runtime switch to the Unicode character scheme.

The vulnerability is reported in version 5.8.8. Other versions may also be affected.

NOTE: An additional potential vulnerability related to the processing of Unicode characters in regular expressions has also been reported.

Solution
Fixed in development version 5.9.5.

Provided and/or discovered by
Red Hat credits Tavis Ormandy and Will Drewry, Google Security Team

Changelog
Further details available in Customer Area

Original Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=323571
http://rt.perl.org/rt3/Public/Bug/Display.html?id=40641

Deep Links
Links available in Customer Area