CVE-2016-4802
N/A
N/A
Summary
Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) security.dll, (2) secur32.dll, or (3) ws2_32.dll in the application or current working directory.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.securitytracker.com/id/1036008
- https://curl.haxx.se/docs/adv_20160530.html
- http://www.securityfocus.com/bid/90997
References
- http://www.securitytracker.com/id/1036008
- https://curl.haxx.se/docs/adv_20160530.html
- http://www.securityfocus.com/bid/90997
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.