Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-5580

Опубликовано: 27 окт. 2014
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libproxy_project:libproxy:0.3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 74%
0.00802
Низкий

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

ubuntu
больше 11 лет назад

Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.

redhat
около 13 лет назад

Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.

debian
больше 11 лет назад

Format string vulnerability in the print_proxies function in bin/proxy ...

github
больше 3 лет назад

Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.

EPSS

Процентиль: 74%
0.00802
Низкий

7.5 High

CVSS2

Дефекты

CWE-94
Уязвимость CVE-2012-5580