NVD

Id
12280  
Name
CVE-2010-0734  
Description
content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-03-19  
Modified Date
2011-10-29  
Seq
2010-0734  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
67573 12280 CVE-2010-0734 http://curl.haxx.se/docs/adv_20100209.html  View
67574 12280 CVE-2010-0734 http://curl.haxx.se/docs/security.html#20100209  View
67575 12280 CVE-2010-0734 http://curl.haxx.se/libcurl-contentencoding.patch  View
67576 12280 CVE-2010-0734 APPLE-SA-2010-06-15-1  View
67577 12280 CVE-2010-0734 FEDORA-2010-2762  View
67578 12280 CVE-2010-0734 FEDORA-2010-2720  View
67579 12280 CVE-2010-0734 oval:org.mitre.oval:def:10760  View
67580 12280 CVE-2010-0734 oval:org.mitre.oval:def:6756  View
67581 12280 CVE-2010-0734 http://support.apple.com/kb/HT4188  View
67582 12280 CVE-2010-0734 http://support.avaya.com/css/P8/documents/100081819  View
67583 12280 CVE-2010-0734 http://wiki.rpath.com/Advisories:rPSA-2010-0072  View
67584 12280 CVE-2010-0734 DSA-2023  View
67585 12280 CVE-2010-0734 MDVSA-2010:062  View
67586 12280 CVE-2010-0734 [oss-security] 20100209 CVE Request -- cURL/libCURL 7.20.0  View
67587 12280 CVE-2010-0734 [oss-security] 20100309 Re: CVE Request -- cURL/libCURL 7.20.0  View
67588 12280 CVE-2010-0734 [oss-security] 20100316 Re: CVE Request -- cURL/libCURL 7.20.0  View
67589 12280 CVE-2010-0734 RHSA-2010:0329  View
67590 12280 CVE-2010-0734 20101027 rPSA-2010-0072-1 curl  View
67591 12280 CVE-2010-0734 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
67592 12280 CVE-2010-0734 USN-1158-1  View
67593 12280 CVE-2010-0734 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
67594 12280 CVE-2010-0734 ADV-2010-0571  View
67595 12280 CVE-2010-0734 ADV-2010-0602  View
67596 12280 CVE-2010-0734 ADV-2010-0660  View
67597 12280 CVE-2010-0734 ADV-2010-0725  View
67598 12280 CVE-2010-0734 ADV-2010-1481  View
67599 12280 CVE-2010-0734 https://bugzilla.redhat.com/show_bug.cgi?id=563220  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35524 JVNDB-2010-001304 libcurl の content_encoding.c におけるサービス運用妨害 (DoS) の脆弱性 libcurl の content_encoding.c には、zlib が有効な場合、自動解凍を行うアプリケーションに送信するコールバックデータを適切に制限しないため、サービス運用妨害 (DoS) 状態となる、または詳細不明な影響を受ける脆弱性が存在します。 CVE-2010-0734 43314 CVE-2010-0734 12280 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001304.html 2010-02-09 2011-02-28 View