Anatomy of a vulnerability – cURL web download toolkit holed by authentication bug

You may not have heard of cURL, but you’ve probably used software that uses it.

Recent versions contain a buffer overflow bug that could lead to remote code execution on your computer.

Paul Ducklin investigates, explains and advises…

Read more: Anatomy of a vulnerability – cURL web download toolkit holed by authentication bug