CVE-2016-9953

The verifycertificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service crash, or possibly have unspecified other impact via a wildcard...

CVE-2016-9953

The CVE-2016-9953 entry affects libcurl 7.30.0–7.51.0 when built for Windows CE with the schannel TLS backend, where the verify_certificate function in lib/vtls/schannel.c can be abused by a crafted wildcard certificate name to trigger an out-of-bounds read. This can allow remote attackers to obt...