KLA10817 Privilege escalation in cURL

Detect date:

05/29/2016

Severity:

High

Description:

An improper DLL loading was found in cURL. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited via a DLL hijack.

Affected products:

cURL and libcurl versions earlier than 7.49.1

Solution:

Update to the latest version
cURL download page

Original advisories:

Original advisory

Impacts:

PE

Related products:

cURL

CVE-IDS:

CVE-2016-48026.9High