How to fix libcurl 7.32.0 < 8.9.1 DoS (CVE-2024-7264) for C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\libcurl.dll for windows server 2016

Question

How to fix libcurl 7.32.0 < 8.9.1 DoS (CVE-2024-7264) for C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\libcurl.dll for windows server 2016

Answer 1

Hello,

To address the libcurl vulnerability (CVE-2024-7264) for the specified path on Windows Server 2016, you should update libcurl to version 8.9.1 or later. Here are the steps you can follow:

Download the Latest Version: Obtain the latest version of libcurl from the official curl website.

Backup Existing Files: Before making any changes, ensure you back up the existing libcurl.dll file located at C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\libcurl.dll.

Replace the DLL:

• Stop any services or applications using the current libcurl.dll.
• Replace the old libcurl.dll with the new version you downloaded.
• Restart the services or applications.

Verify the Update: Confirm that the new version is correctly installed and functioning by checking the version of libcurl.dll.

Answer 2

Hi,

Is the above steps works for servers with 2022 and 2019 OS version as well?