CVE-2012-4505

Synopsis Moderate: libproxy security update Type/Severity Security Advisory: Moderate Topic Updated libproxy packages that fix one security issue are now available forRed Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact A Common Vulnerability ...

Debian Bug report logs - #690376 libproxy: PAC handling insufficient content length check leading to buffer overflow Package: libproxy; Maintainer for libproxy is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Reported by: "Thijs Kinkhorst" <thijs@debianorg> Date: Sat, 13 Oct 2012 13:21:02 ...

libproxy could be made to crash or run programs if it received specially crafted network traffic ...

The Red Hat Security Response Team discovered that libproxy, a library for automatic proxy configuration management, applied insufficient validation to the Content-Length header sent by a server providing a proxypac file Such remote server could trigger an integer overflow and consequently overflow an in-memory buffer For the stable distribution ...

A buffer overflow flaw was found in the way libproxy handled the downloading of proxy auto-configuration (PAC) files A malicious server hosting a PAC file or a man-in-the-middle attacker could use this flaw to cause an application using libproxy to crash or, possibly, execute arbitrary code, if the proxy settings obtained by libproxy (from the env ...