CVE-2012-2090: Critical severity opendaylight vulnerability
Multiple format string flaws were reported: [1] http://sourceforge.net/mailarchive/message.php?msgid=28957051
in the way Flight Gear, the flight simulator, and SimGear, a simulation library components performed retrieval of various data chunk values from XML aircraft (FlightGear) or scene graph (SimGear) model data files. A remote attacker could provide a specially-crafted XML model file, which once opened by a local, unsuspecting user in FlightGear / in an application linked against SimGear, would lead to that particular executable crash.
CVE Request: [2] http://www.openwall.com/lists/oss-security/2012/04/10/9
CVE Assignment: [3] http://www.openwall.com/lists/oss-security/2012/04/10/13
Upstream patch: None as of right now.
Other sources
Multiple format string vulnerabilities in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in certain data chunk values in an aircraft xml model to (1) fgfs/flightgear/src/Cockpit/panel.cxx or (2) fgfs/flightgear/src/Network/generic.cxx, or (3) a scene graph model to simgear/simgear/scene/model/SGText.cxx.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2090?
CVE-2012-2090 has been classified as having medium severity due to the potential for format string vulnerabilities.
How do I fix CVE-2012-2090?
To fix CVE-2012-2090, update FlightGear or SimGear to the latest versions that are not vulnerable.
Which versions of FlightGear are affected by CVE-2012-2090?
CVE-2012-2090 affects FlightGear versions up to and including 2.6.0, as well as specific earlier versions.
Which versions of SimGear are affected by CVE-2012-2090?
CVE-2012-2090 impacts SimGear versions up to and including 2.6.0 along with specific earlier versions.
What types of vulnerabilities are included in CVE-2012-2090?
CVE-2012-2090 includes multiple format string flaws that can be exploited.