CVE-2009-3305

Polipo is affected: Polipo 1.0.4 (and possibly other versions) is vulnerable to a remote denial-of-service where a crafted Cache-Control header missing max-age triggers a segmentation fault in httpParseHeaders (http_parse.c), leading to a crash. Exploitation status and vectors: remote trigger via...

CVE-2009-4413

CVE-2009-4413 affects the Polipo web proxy. The issue resides in httpClientDiscardBody in client.c, present in Polipo versions such as 0.9.8, 0.9.12, and 1.0.4. A crafted remote request with a large Content-Length triggers an integer overflow and a signed-to-unsigned conversion error, leading to ...

CVE-2008-7191

Polipo