CVE - CVE-2012-2091

CVE-ID
CVE-2012-2091	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:48780 URL:http://secunia.com/advisories/48780 MISC:FEDORA-2012-8615 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082017.html MISC:FEDORA-2012-8647 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081997.html MISC:FEDORA-2012-8650 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082002.html MISC:GLSA-201603-12 URL:https://security.gentoo.org/glsa/201603-12 MISC:[Flightgear-devel] 20120309 Flightgear and Simgear multiple format string vulnerabilities URL:http://sourceforge.net/mailarchive/message.php?msg_id=28957051 MISC:[Flightgear-devel] 20120320 Re: Flightgear and Simgear multiple format string vulnerabilities URL:http://sourceforge.net/mailarchive/message.php?msg_id=29012174 MISC:[oss-security] 20120410 Re: CVE Request: FlightGear and Simgear Multiple vulnerabilities URL:http://www.openwall.com/lists/oss-security/2012/04/10/13 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=811617 URL:https://bugzilla.redhat.com/show_bug.cgi?id=811617
Assigning CNA
Red Hat, Inc.
Date Record Created
20120404	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120404)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)