CVE-2012-2091
Critical
Description
Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx.
SeverityCritical
CVSS9.3
Exploit probability—
ProductFlightgear
PublishedJun 17, 2012
First seenJun 17, 2012
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flightgear flightgear | v ≤ 2.6.0, 1.9.1, 2.0.0 | — |
| simgear simgear | v ≤ 2.6.0, 1.9.1, 2.0.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.