Search/CVE-2004-0377
● CVE

CVE-2004-0377

Vendorlarry wall, activestateProductperl, activeperlDiscoveredMay 4, 2004UpdatedApr 16, 2026

Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character.

CVSS v3.1
—
EPSS
6.77%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 6, 2026
▼ 0.09pp
6.86% → 6.77% over 2 tracked changes
Connections
2 relationships
Timeline
disclosure → media coverage
May 4, 2004
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026