VDB
CVE-2012-2091
CVE-2012-2091
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx.
EPSS 6.46% · 93.6th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
6.46%
93.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| simgear | simgear | 0, 1.9.1, 2.0.0 |
| flightgear | flightgear | 1.9.1, 2.0.0, 0 |
| n/a | n/a | n/a |
Timeline
- Jun 17, 2012 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
- Nov 1, 2023 EPSS Score
References
- FEDORA-2012-8650 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=811617 url
- 48780 third-party-advisory
- GLSA-201603-12 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2012-2091 advisory
- http://sourceforge.net/mailarchive/message.php?msg_id=29012174 url
- http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082017.html technical
- http://www.openwall.com/lists/oss-security/2012/04/10/13 technical
- http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081997.html technical
- http://sourceforge.net/mailarchive/message.php?msg_id=28957051 technical