Not rated
CVE-2016-4606 Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute…
Description
Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| curl | Versions not published |
References
- www.securitytracker.com www.securitytracker.com
- lists.apple.com lists.apple.com
- www.securityfocus.com www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of curl
The 4 CVEs of curl →
CVE-2019-5482
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3
9.8
Critical
CVE-2019-5481
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3
9.8
Critical
CVE-2019-5443
A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/)…
Not rated