CVE-2012-4505

2012-11-1113:00:49

CWE-119

redhat

web.nvd.nist.gov

cve-2012-4505

buffer overflow

libproxy

http

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

0.014

Percentile

86.7%

JSON

Heap-based buffer overflow in the px_pac_reload function in lib/pac.c in libproxy 0.2.x and 0.3.x allows remote servers to have an unspecified impact via a crafted Content-Length size in an HTTP response header for a proxy.pac file request, a different vulnerability than CVE-2012-4504.

Affected configurations

Nvd

Node

libproxy_projectlibproxyMatch0.2.3

libproxy_projectlibproxyMatch0.3.0

libproxy_projectlibproxyMatch0.3.1

VendorProductVersionCPE
libproxy_projectlibproxy0.2.3cpe:2.3:a:libproxy_project:libproxy:0.2.3:*:*:*:*:*:*:*
libproxy_projectlibproxy0.3.0cpe:2.3:a:libproxy_project:libproxy:0.3.0:*:*:*:*:*:*:*
libproxy_projectlibproxy0.3.1cpe:2.3:a:libproxy_project:libproxy:0.3.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
libproxy_project	libproxy	0.2.3	cpe:2.3:a:libproxy_project:libproxy:0.2.3:::::::*
libproxy_project	libproxy	0.3.0	cpe:2.3:a:libproxy_project:libproxy:0.3.0:::::::*
libproxy_project	libproxy	0.3.1	cpe:2.3:a:libproxy_project:libproxy:0.3.1:::::::*