Approved changes feed: RSS · Atom
cpe:2.3:a:daniel_stenberg:curl:7.12:*:*:*:*:*:*:*
part: a version: 7.12 update: *
| Vendor | Daniel Stenberg (c85fc9f9-997a-5010-8c70-6af3488a38fc) |
|---|---|
| Product | Curl (4990aba8-d9de-53e2-a237-ccf04b45bd47) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-4077 |
vulnerable | 2026-06-08 04:48:42.952020 |
Details available
Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prevents a terminating null byte from being added to either a hostname or path buffer, or (2) contain a "?" separator in the hostname portion, which causes a "/" to be prepended to the resulting string.
Published: 2005-12-08T01:00:00.000Z
Updated: 2024-08-07T23:31:48.962Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.