| Summary: | net-misc/curl-7.15.0 URL Parsing Vulnerability | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Andreas Korthaus <akorthaus> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | normal | ||
| Priority: | High | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://www.hardened-php.net/advisory_242005.109.html | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
Advisory: libcurl URL Parsing Vulnerability Release Date: 2005/12/07 Last Modified: 2005/12/07 Author: Stefan Esser [sesser@hardened-php.net] Application: Curl <= 7.15.0 libcurl <= 7.15.0 Severity: When (lib)Curl tries to parse a certain kind of malformed URLs this leads to a heap overflow Risk: Low Vendor Status: Vendor has released an updated version References: http://www.hardened-php.net/advisory_242005.109.html curl advisory: http://curl.haxx.se/docs/adv_20051207.html release notes: http://curl.haxx.se/changes.html