CVE-2012-5580

CVE-2012-5580 describes a format string vulnerability in the print_proxies function of libproxy 0.3.1. This flaw allows attackers to trigger a denial of service (crash) and potentially execute arbitrary code by injecting format string specifiers into a proxy name, such as via the http_proxy environment variable or a PAC file. With a CVSS score of 7.5, this vulnerability is considered high severity, indicating a network-based attack with low complexity that could lead to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage.