Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2016-10-07T14:00:00
Updated: 2024-08-06T01:50:47.483Z
Reserved: 2016-09-08T00:00:00
Link: CVE-2016-7167
Vulnrichment
No data.
NVD
Status : Modified
Published: 2016-10-07T14:59:08.100
Modified: 2023-11-07T02:34:16.090
Link: CVE-2016-7167
Redhat