CVE-2004-2286

CVE-2004-2286 describes an integer overflow vulnerability in the duplication operator of ActivePerl and Larry Wall Perl 5.x. This flaw allows remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code by supplying a large multiplier, leading to a buffer overflow. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impact. While not on the KEV catalog or Hot List, an ExploitDB entry (EDB-24130) confirms the existence of public exploit code, though there is no evidence of active exploitation or significant community discussion.