← Database

CVE-2006-1061

HIGH CVSS: 7.5 Published: 2006-03-21 Modified: 2026-06-16

Description

Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (tftp://) with a valid hostname and a long path.

Affected Platforms

Daniel Stenberg Curl

Weakness Type

NVD-CWE-Other

References