CVE-2016-7167
CriticalSummary
Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before version 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.
Risk Assessment
Attackers may exploit this vulnerability to execute arbitrary code or gain access to memory, potentially leading to serious security implications for the system.
Recommendation
It is recommended to update libcurl to version 7.50.3 or later to mitigate this vulnerability.
Original NVD description (English source)
Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.