VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 27, 2014· Updated Jun 16, 2026

CVE-2012-5580

CVE-2012-5580

Description

Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Libproxy Project/Libproxy2 versions
    cpe:2.3:a:libproxy_project:libproxy:0.3.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:libproxy_project:libproxy:0.3.1:*:*:*:*:*:*:*
    • (no CPE)range: =0.3.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.