CVE-2013-7038

CVE-2013-7038 affects libmicrohttpd up to version prior to 0.9.32. The MHD_http_unescape function may trigger an out-of-bounds read, allowing remote attackers to obtain sensitive information and/or cause a denial of service (crash). Several advisories (openSUSE/SUSE/Mageia/OpenVAS listings) indic...