CVE-2012-2090
Critical
Description
Multiple format string vulnerabilities in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in certain data chunk values in an aircraft xml model to (1) fgfs/flightgear/src/Cockpit/panel.cxx or (2) fgfs/flightgear/src/Network/generic.cxx, or (3) a scene graph model to simgear/simgear/scene/model/SGText.cxx.
SeverityCritical
CVSS9.3
Exploit probability—
ProductFlightgear
PublishedJun 17, 2012
First seenJun 17, 2012
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flightgear flightgear | v ≤ 2.6.0, 1.9.1, 2.0.0 | — |
| simgear simgear | v ≤ 2.6.0, 1.9.1, 2.0.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.