CVE-2012-6090: Buffer Overflow
Multiple stack-based buffer overflows in the expand function in os/pl-glob.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted filename.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6090?
CVE-2012-6090 is classified as a high severity vulnerability as it can lead to denial of service or potentially allow remote code execution.
Which SWI-Prolog versions are affected by CVE-2012-6090?
CVE-2012-6090 affects SWI-Prolog versions prior to 6.2.5 and 6.3.x prior to 6.3.7.
How do I fix CVE-2012-6090?
To fix CVE-2012-6090, upgrade SWI-Prolog to version 6.2.5 or later, or to 6.3.7 or later.
What types of attacks can exploit CVE-2012-6090?
CVE-2012-6090 can be exploited through crafted filenames that trigger stack-based buffer overflows.
What impact can CVE-2012-6090 have on a system?
Exploitation of CVE-2012-6090 can cause application crashes leading to denial of service, and may also allow arbitrary code execution.