CVE-2012-4505: libproxy: PAC handling insufficient content length check leading to buffer overflow

Severity: Critical

CVSS Score: 10

Heap-based buffer overflow in the px_pac_reload function in lib/pac.c in libproxy 0.2.x and 0.3.x allows remote servers to have an unspecified impact via a crafted Content-Length size in an HTTP response header for a proxy.pac file request, a different vulnerability than CVE-2012-4504.