CVE-2012-0804: cvs: client proxy_connect heap-based buffer overflow

Severity: Critical

CVSS Score: 10

Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.