Lucene search
+L

282 matches found

NVD
NVD
•added 2014/10/27 10:55 p.m.•27 views

CVE-2012-5580

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.5CVSS7.5AI score0.03125EPSS
SaveExploits1References5
OSV
OSV
•added 2014/10/27 10:55 p.m.•13 views

CVE-2012-5580

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.7AI score
SaveExploits0References5
OSV
OSV
•added 2014/10/27 10:55 p.m.•12 views

DEBIAN-CVE-2012-5580

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.5CVSS7.8AI score0.03125EPSS
SaveExploits1References1
Prion
Prion
•added 2014/10/27 10:55 p.m.•21 views

Format string

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.5CVSS8.1AI score0.03125EPSS
SaveExploits1References5Affected Software1
UbuntuCve
UbuntuCve
•added 2014/10/27 10:55 p.m.•30 views

CVE-2012-5580

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.5CVSS6.2AI score0.03125EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2014/10/27 10:00 p.m.•42 views

CVE-2012-5580

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.4AI score0.03125EPSS
SaveExploits1References5
Mend
Mend
•added 2014/10/27 10:00 p.m.•0 views

CVE-2012-5580

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.5CVSS0.03125EPSS
SaveExploits1References6
CVE
CVE
•added 2014/10/27 10:00 p.m.•61 views

CVE-2012-5580

CVE-2012-5580 affects libproxy 0.3.1. The vulnerability exists in print_proxies (bin/proxy.c) where a format string flaw in a proxy name allows context-dependent attackers to trigger a crash (and possibly code execution) via format string specifiers. Exploitation scenarios mentioned include the h...

7.5CVSS7.6AI score0.03125EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2014/10/27 12:00 a.m.•1 views

PT-2014-2343

Name of the Vulnerable Software and Affected Versions libproxy version 0.3.1 Description The issue is related to a format string vulnerability in the print proxies function. This could allow attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in ...

7.5CVSS0.03125EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/27 12:00 a.m.•2 views

CVE-2012-5580: Improper Control of Generation of Code

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.5CVSS6.4AI score0.03125EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2014/06/13 12:00 a.m.•32 views

openSUSE Security Update : libproxy / libproxy-plugins (openSUSE-SU-2012:1375-1)

This update of libproxy fixed a buffer overflow flaw. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-720. The text description of this plugin is C SUSE LLC...

10CVSS7AI score0.03476EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2014/06/13 12:00 a.m.•33 views

openSUSE Security Update : Mozilla Suite (openSUSE-SU-2012:1412-1)

Mozilla Firefox, Thunderbird and XULRunner were updated to 16.0.2. Mozilla SeaMonkey was updated to 2.13.2. Tracker bug: bnc786522 A security issues was fixed : - MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196 bmo800666, bmo793121, bmo802557 Fixes for Location object issues The update als...

6.4CVSS8.3AI score0.03287EPSS
SaveExploits2References8
Tenable Nessus
Tenable Nessus
•added 2014/06/13 12:00 a.m.•40 views

openSUSE Security Update : openconnect (openSUSE-SU-2013:1072-1)

This openconnect update to version 3.20 includes several security and bug fixes. - fix bnc767616 - fix for CVE-2012-3291 - make vpnc mandatory during build, following upstream changes - package documentation in a -doc package - Update to version 3.20 - Cope with non-keepalive HTTP response on...

7.8CVSS5.8AI score0.02322EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2014/04/08 12:00 a.m.•15 views

GLSA-201404-02 : libproxy: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201404-02 libproxy: User-assisted execution of arbitrary code A boundary error when processing the proxy.pac file could cause a stack-based buffer overflow. Impact : A man-in-the-middle attacker could provide a specially crafted...

10CVSS6.4AI score0.03476EPSS
SaveExploits0References2
Gentoo Linux
Gentoo Linux
•added 2014/04/07 12:00 a.m.•34 views

libproxy: User-assisted execution of arbitrary code

Background libproxy is a library for automatic proxy configuration management. Description A boundary error when processing the proxy.pac file could cause a stack-based buffer overflow. Impact A man-in-the-middle attacker could provide a specially crafted proxy.pac file on a remote server, possib...

10CVSS7.1AI score0.03476EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2013/09/04 12:00 a.m.•397 views

Amazon Linux AMI : libproxy (ALAS-2012-140)

A buffer overflow flaw was found in the way libproxy handled the downloading of proxy auto-configuration PAC files. A malicious server hosting a PAC file or a man-in-the-middle attacker could use this flaw to cause an application using libproxy to crash or, possibly, execute arbitrary code, if th...

10CVSS6AI score0.03218EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2013/07/12 12:00 a.m.•88 views

Oracle Linux 6 : libproxy (ELSA-2012-1461)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1461 advisory. 0.3.0-3 - Fix CVE-2012-4505 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

10CVSS5.5AI score0.03218EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2013/07/12 12:00 a.m.•37 views

Oracle Linux 5 / 6 : firefox (ELSA-2013-0271)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0271 advisory. firefox 17.0.3-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 17.0.3-1 - Update to 17.0.3 ESR 17.0.2-4 - Add...

9.3CVSS7.9AI score0.05364EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2013/03/12 12:00 a.m.•24 views

Fedora Update for libproxy FEDORA-2012-20092

Check for the Version of libproxy OpenVAS Vulnerability Test Fedora Update for libproxy FEDORA-2012-20092 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

10CVSS0.4AI score0.03476EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2013/03/12 12:00 a.m.•32 views

Fedora Update for libproxy FEDORA-2012-20092

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS6.5AI score0.03125EPSS
SaveExploits1References2
Rows per page
Query Builder