NVD

Id
43941  
Name
CVE-2012-2091  
Description
Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-06-16  
Modified Date
2016-12-02  
Seq
2012-2091  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220701 43941 CVE-2012-2091 FEDORA-2012-8647  View
220702 43941 CVE-2012-2091 FEDORA-2012-8650  View
220703 43941 CVE-2012-2091 FEDORA-2012-8615  View
220704 43941 CVE-2012-2091 [Flightgear-devel] 20120309 Flightgear and Simgear multiple format string vulnerabilities  View
220705 43941 CVE-2012-2091 [Flightgear-devel] 20120320 Re: Flightgear and Simgear multiple format string vulnerabilities  View
220706 43941 CVE-2012-2091 [oss-security] 20120410 Re: CVE Request: FlightGear and Simgear Multiple vulnerabilities  View
220707 43941 CVE-2012-2091 https://bugzilla.redhat.com/show_bug.cgi?id=811617  View
220708 43941 CVE-2012-2091 GLSA-201603-12  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27060 JVNDB-2012-002767 FlightGear および SimGear におけるバッファオーバーフローの脆弱性 FlightGear および SimGear には、バッファオーバーフローの脆弱性が存在します。 CVE-2012-2091 55329 CVE-2012-2091 43941 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002767.html 2012-06-17 2012-06-19 View