CVE-2013-2174

Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.

• haxx curl 7.7 • haxx curl 7.7.1 • haxx curl 7.7.2 • haxx curl 7.7.3 • haxx curl 7.8 • haxx curl 7.8.1 • haxx curl 7.9 • haxx curl 7.9.1 • haxx curl 7.9.2 • haxx curl 7.9.3 • haxx curl 7.9.4 • haxx curl 7.9.5 • haxx curl 7.9.6 • haxx curl 7.9.7 • haxx curl 7.9.8 • haxx curl 7.10 • haxx curl 7.10.1 • haxx curl 7.10.2 • haxx curl 7.10.3 • haxx curl 7.10.4 • haxx curl 7.10.5 • haxx curl 7.10.6 • haxx curl 7.10.7 • haxx curl 7.10.8 • haxx curl 7.11.0 • haxx curl 7.11.1 • haxx curl 7.11.2 • haxx curl 7.12.0 • haxx curl 7.12.1 • haxx curl 7.12.2 • haxx curl 7.12.3 • haxx curl 7.13.0 • haxx curl 7.13.1 • haxx curl 7.13.2 • haxx curl 7.14.0 • haxx curl 7.14.1 • haxx curl 7.15.0 • haxx curl 7.15.1 • haxx curl 7.15.2 • haxx curl 7.15.3 • haxx curl 7.15.4 • haxx curl 7.15.5 • haxx curl 7.16.0 • haxx curl 7.16.1 • haxx curl 7.16.2 • haxx curl 7.16.3 • haxx curl 7.16.4 • haxx curl 7.17.0 • haxx curl 7.17.1 • haxx curl 7.18.0 • haxx curl 7.18.1 • haxx curl 7.18.2 • haxx curl 7.19.0 • haxx curl 7.19.1 • haxx curl 7.19.2 • haxx curl 7.19.3 • haxx curl 7.19.4 • haxx curl 7.19.5 • haxx curl 7.19.6 • haxx curl 7.19.7 … and 109 more