{"id":"CVE-2017-7407","details":"The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a heap-based buffer over-read.","aliases":["CURL-CVE-2017-7407"],"modified":"2026-07-08T16:53:35.427774Z","published":"2017-04-03T20:59:00.247Z","related":["SUSE-SU-2017:1042-1","SUSE-SU-2017:1043-1","SUSE-SU-2017:1117-1","SUSE-SU-2017:2312-1","SUSE-SU-2017:2699-1","SUSE-SU-2017:2700-1"],"references":[{"type":"ADVISORY","url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3558"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201709-14"},{"type":"FIX","url":"https://github.com/curl/curl/commit/1890d59905414ab84a35892b2e45833654aa5c13"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/curl/curl","events":[{"introduced":"25df50aa3392ecdbf2b8256b93b30558e8b3a810"},{"last_affected":"25df50aa3392ecdbf2b8256b93b30558e8b3a810"},{"fixed":"1890d59905414ab84a35892b2e45833654aa5c13"}],"database_specific":{"extracted_events":[{"introduced":"7.53.1"},{"last_affected":"7.53.1"}],"cpe":"cpe:2.3:a:haxx:curl:7.53.1:*:*:*:*:*:*:*","source":["CPE_STRING","REFERENCES"]}}],"versions":["7.53.1","curl-7_53_1"],"database_specific":{"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["119066316151948807005295019564101395011","137737830742583149452429535963228918912","51529351887636434842909831520961132979","180982491866925066316252044149786616047"]},"deprecated":false,"id":"CVE-2017-7407-503b5770","signature_type":"Line","target":{"file":"src/tool_writeout.c"},"signature_version":"v1","source":"https://github.com/curl/curl/commit/1890d59905414ab84a35892b2e45833654aa5c13"},{"digest":{"length":5508,"function_hash":"122384078902818575986643295615648528317"},"deprecated":false,"id":"CVE-2017-7407-defd70e3","signature_type":"Function","target":{"file":"src/tool_writeout.c","function":"ourWriteOut"},"signature_version":"v1","source":"https://github.com/curl/curl/commit/1890d59905414ab84a35892b2e45833654aa5c13"}],"vanir_signatures_modified":"2026-07-08T16:53:35Z","source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7407.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}