CVE-2012-5580
libproxy 0.3.1 - Format String Vulnerability via Proxy Name
Title source: llmDescription
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/56712
Issue Tracking x_refsource_confirm
https://code.google.com/p/libproxy/source/detail?r=475
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80340
Exploit x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=883100
Exploit x_refsource_confirm
https://bugzilla.novell.com/show_bug.cgi?id=791086
Scores
EPSS
0.0312
EPSS Percentile
86.3%
Details
CWE
CWE-94
Status
published
Products (1)
libproxy_project/libproxy
0.3.1
Published
Oct 27, 2014
Tracked Since
Feb 18, 2026