CVE-2012-5580
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might...
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
- Record
CVE-2012-5580- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE ListNo score
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
- Record
CVE-2012-5580- Updated
- 2026-11-02
EUVDEUVD-2012-5467No score
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
- Record
EUVD-2012-5467- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mccr-h554-3wjwNo score
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might...
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
- Record
GHSA-mccr-h554-3wjw- Weakness
- CWE-94
- Updated
- 2026-11-02
OSVNo score
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
- Record
CVE-2012-5580- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-5580No score
Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.
- Record
DEBIAN-CVE-2012-5580- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-5580 is a high vulnerability (CVSS 7.5) in Libproxy Project Libproxy, published October 27, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.13%, the 88th percentile. Fixed in libproxy 0.3.1-4.
References
securityfocus.com/bid/56712
code.google.com/p/libproxy/source/detail?r=475
exchange.xforce.ibmcloud.com/vulnerabilities/80340
bugzilla.redhat.com/show_bug.cgi?id=883100
bugzilla.novell.com/show_bug.cgi?id=791086
nvd.nist.gov/vuln/detail/CVE-2012-5580
github.com/advisories/GHSA-mccr-h554-3wjw
security-tracker.debian.org/tracker/CVE-2012-5580