Posté par: igor51 le février 11, 2013, 21:45:44
You may not have heard of cURL, but you've probably used software that uses it.
Recent versions contain a buffer overflow bug that could lead to remote code execution on your computer.
Paul Ducklin investigates, explains and advises...
Source: Anatomy of a vulnerability - cURL web download toolkit holed by authentication bug (http://feedproxy.google.com/~r/nakedsecurity/~3/H_2fjd2sEBk/)