CVE-2019-25078

CVE-2019-25078 affects pacparser up to 1.3.x. The vulnerable component is the function pacparser_find_proxy in src/pacparser.c, where manipulating the url argument leads to a buffer overflow. Local access is required for exploitation. A fix is available in pacparser 1.4.0, with patch identified b...