PatchTheCVEactivestate vulnerabilities
Recent CVEs affecting activestate products. 9 tracked.
activestate has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2012-10-11. Highest priority: CVE-2004-0377 (score 58/100).
- CVE-2012-5379 HIGH 7.3 DOWNGRADE Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed
- CVE-2012-5378 MEDIUM 6.0 DOWNGRADE Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in t
- CVE-2012-5377 MEDIUM 6.0 DOWNGRADE Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installe
- CVE-2006-2856 MEDIUM 4.6 DOWNGRADE ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions
- CVE-2004-2286 HIGH 7.5 DOWNGRADE DOWNGRADE Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of servic
- CVE-2004-2022 LOW 2.1 DOWNGRADE ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows a
- CVE-2004-0377 HIGH 10.0 MITIGATE UPGRADE Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5
- CVE-2002-0131 MEDIUM 5.0 DOWNGRADE ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prev
- CVE-2001-0815 HIGH 7.5 UPGRADE Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execu
FAQ
How do I fix activestate vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is activestate being exploited right now?
None of the tracked activestate CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which activestate CVE should I patch first?
CVE-2004-0377 currently ranks highest (58/100): Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.