CVE-2012-5580
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might...
CVE-2012-5580 is a high vulnerability (CVSS 7.5) in Libproxy Project Libproxy, published October 27, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.13%, the 87th percentile. Fixed in libproxy 0.3.1-4.
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
- Record
CVE-2012-5580- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
- Record
CVE-2012-5580- Updated
- 2026-11-02
EUVDEUVD-2012-5467 No score
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
- Record
EUVD-2012-5467- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mccr-h554-3wjw No score
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might...
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
- Record
GHSA-mccr-h554-3wjw- Weakness
- CWE-94
- Updated
- 2026-11-02
OSV No score
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
- Record
CVE-2012-5580- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-5580 No score
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
- Record
DEBIAN-CVE-2012-5580- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/56712
code.google.com/p/libproxy/source/detail?r=475
exchange.xforce.ibmcloud.com/vulnerabilities/80340
bugzilla.redhat.com/show_bug.cgi?id=883100
bugzilla.novell.com/show_bug.cgi?id=791086
nvd.nist.gov/vuln/detail/CVE-2012-5580
github.com/advisories/GHSA-mccr-h554-3wjw
security-tracker.debian.org/tracker/CVE-2012-5580