A denial of service vulnerability exists in Perl CGI versions from 4.71 before 5.00. The issue arises because the uploadInfo function dereferences its argument and calls its filename method without verifying that the argument is an upload filehandle. If a plain string referencing a defined global variable is passed, it is treated as a symbolic reference, causing the method call to fail and resulting in a denial of service.