NetSight
IP …
medium6.8

CVE-2013-2174

Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial …

Impact

Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.

Affected products

VendorProductAffected versions
HaxxCurl
Versions 7.7, 7.7.1, 7.7.2, 7.7.3, 7.8, 7.8.1
HaxxLibcurl
Versions 7.7, 7.7.1, 7.7.2, 7.7.3, 7.8, 7.8.1
CanonicalUbuntu Linux
Versions 10.04, 12.04, 12.10, 13.04
OpensuseOpensuse
Version 11.4
RedhatEnterprise Linux
Versions 5, 6.0

Weakness classification

CWE-119

References