Home > Vulnerability Database > CVE-2010-0734

Mend.io Vulnerability Database

CVE-2010-0734

Date: March 19, 2010

content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.

Language: C

Severity Score

5.6

Related Resources (39)

Url: http://www.vupen.com/english/advisories/2010/0571

Url: http://www.vupen.com/english/advisories/2010/1481

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10760

Url: http://support.apple.com/kb/HT4188

Url: http://secunia.com/advisories/45047

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036744.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-0734

Url: https://bugzilla.redhat.com/show_bug.cgi?id=563220

Url: http://curl.haxx.se/docs/adv_20100209.html

Url: http://www.debian.org/security/2010/dsa-2023

Url: http://www.ubuntu.com/usn/USN-1158-1

Url: http://secunia.com/advisories/48256

Url: http://www.redhat.com/support/errata/RHSA-2010-0329.html

Url: http://www.securityfocus.com/archive/1/514490/100/0/threaded

Url: http://security.gentoo.org/glsa/glsa-201203-02.xml

Url: http://www.vupen.com/english/advisories/2010/0660

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2010:062

Url: http://www.vupen.com/english/advisories/2010/0725

Url: http://www.vupen.com/english/advisories/2010/0602

Url: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html

Url: http://secunia.com/advisories/38981

Url: http://www.vmware.com/security/advisories/VMSA-2011-0003.html

Url: http://secunia.com/advisories/38843

Url: http://secunia.com/advisories/39734

Url: http://www.openwall.com/lists/oss-security/2010/02/09/5

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2010-0734

Url: http://curl.haxx.se/libcurl-contentencoding.patch

Url: http://www.securityfocus.com/archive/1/516397/100/0/threaded

Url: http://wiki.rpath.com/Advisories:rPSA-2010-0072

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037143.html

Url: http://www.openwall.com/lists/oss-security/2010/03/16/11

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6756

Url: http://secunia.com/advisories/39087

Url: http://www.openwall.com/lists/oss-security/2010/03/09/1

Url: https://access.redhat.com/security/cve/CVE-2010-0734

Url: http://curl.haxx.se/docs/security.html#20100209

Url: http://secunia.com/advisories/40220

Url: http://support.avaya.com/css/P8/documents/100081819

Url: https://www.mend.io/vulnerability-database/CVE-2010-0734

Severity Score

5.6

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

Function Call with Incorrectly Specified Arguments

CWE-628

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2010-0734

Date: March 19, 2010

Language: C

Severity Score

Related Resources (39)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?