CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-0036

curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.075

EPSS Ranking 91.4%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2012-0036

Curl » Curl » Version: 7.20.0

cpe:2.3:a:curl:curl:7.20.0
Curl » Curl » Version: 7.20.1

cpe:2.3:a:curl:curl:7.20.1
Curl » Curl » Version: 7.21.0

cpe:2.3:a:curl:curl:7.21.0
Curl » Curl » Version: 7.21.1

cpe:2.3:a:curl:curl:7.21.1
Curl » Curl » Version: 7.21.2

cpe:2.3:a:curl:curl:7.21.2
Curl » Curl » Version: 7.21.3

cpe:2.3:a:curl:curl:7.21.3
Curl » Curl » Version: 7.21.4

cpe:2.3:a:curl:curl:7.21.4
Curl » Curl » Version: 7.21.5

cpe:2.3:a:curl:curl:7.21.5
Curl » Curl » Version: 7.21.6

cpe:2.3:a:curl:curl:7.21.6
Curl » Curl » Version: 7.21.7

cpe:2.3:a:curl:curl:7.21.7
Curl » Curl » Version: 7.22.0

cpe:2.3:a:curl:curl:7.22.0
Curl » Curl » Version: 7.23.0

cpe:2.3:a:curl:curl:7.23.0
Curl » Curl » Version: 7.23.1

cpe:2.3:a:curl:curl:7.23.1
Curl » Libcurl » Version: 7.20.0

cpe:2.3:a:curl:libcurl:7.20.0
Curl » Libcurl » Version: 7.20.1

cpe:2.3:a:curl:libcurl:7.20.1
Curl » Libcurl » Version: 7.21.0

cpe:2.3:a:curl:libcurl:7.21.0
Curl » Libcurl » Version: 7.21.1

cpe:2.3:a:curl:libcurl:7.21.1
Curl » Libcurl » Version: 7.21.2

cpe:2.3:a:curl:libcurl:7.21.2
Curl » Libcurl » Version: 7.21.3

cpe:2.3:a:curl:libcurl:7.21.3
Curl » Libcurl » Version: 7.21.4

cpe:2.3:a:curl:libcurl:7.21.4
Curl » Libcurl » Version: 7.21.5

cpe:2.3:a:curl:libcurl:7.21.5
Curl » Libcurl » Version: 7.21.6

cpe:2.3:a:curl:libcurl:7.21.6
Curl » Libcurl » Version: 7.21.7

cpe:2.3:a:curl:libcurl:7.21.7
Curl » Libcurl » Version: 7.22.0

cpe:2.3:a:curl:libcurl:7.22.0
Curl » Libcurl » Version: 7.23.0

cpe:2.3:a:curl:libcurl:7.23.0
Curl » Libcurl » Version: 7.23.1

cpe:2.3:a:curl:libcurl:7.23.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-0036

Products

Pricing

Contact Us