cURL Heap Overflow Vulnerability

A vulnerability has been identified in libcurl. A remote user can execute arbitrary code on the target system.

A remote user can send specially crafted data to trigger a heap overflow in curl_easy_unescape() and execute arbitrary code on the target system. The code will run with the privileges of the target service.

Systems that pass user-supplied data to the curl_easy_unescape() function may be affected.