CVE-2012-0036 in haxx.se cURL
Sumário (Inglês)
curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol.
Reservar
07/12/2011
Divulgação
13/04/2012
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 4577 | haxx.se cURL Protocol Injeção SQL | 89 | Não definido | Correção oficial | CVE-2012-0036 |