CVE-2012-0036

curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to…

published April 13, 2012

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16117 · 96.9th percentile
Published
2012-04-13T20:00Z
EPSS history
Timeline
  • 13 APR 20:00Z
    curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to…
    cvelistv5