CVE-2012-0804

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1930%

EPSS Percentile2.58th

Published2012年5月29日

Last Modified2026年4月29日

Vulnerability Description

Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.

Affected Platforms (CPE)

📦

Cvs

= 1.11

📦

Cvs

= 1.12

References & Advisories

🔗 http://lists.opensuse.org/opensuse-updates/2012-02/msg00064.html

🔗 http://rhn.redhat.com/errata/RHSA-2012-0321.html

🔗 http://secunia.com/advisories/47869

🔗 http://secunia.com/advisories/48063

🔗 http://secunia.com/advisories/48142

🔗 http://secunia.com/advisories/48150

🔗 http://ubuntu.com/usn/usn-1371-1

🔗 http://www.debian.org/security/2012/dsa-2407

Vulnerability Description

Affected Platforms (CPE)

Cvs

Cvs

References & Advisories

関連する脆弱性情報