CVE-2025-0781: Incorrect Authorization in SimGear
Published Jan 28, 2025
·Updated
An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.
Affected Software
3 affected components
SimGear SimGear
FlightGear Simgear<=2020.3.19
Debian Debian Linux=11.0
Remediation
Information
Upgrade to FlightGear version 2020.3.20 or 2024.1.1.
Event History
Jan 28, 2025
CVE Published
via MITRE·04:34 PM
Data Sourced
via MITRE·04:34 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-0781?
CVE-2025-0781 is rated as a critical severity vulnerability due to its ability to bypass sandboxing and allow arbitrary file writing.
2
How do I fix CVE-2025-0781?
To fix CVE-2025-0781, update to the latest version of SimGear where the vulnerability has been addressed.
3
What systems are affected by CVE-2025-0781?
CVE-2025-0781 affects SimGear, particularly versions that allow Nasal script execution.
4
What can attackers achieve with CVE-2025-0781?
With CVE-2025-0781, attackers can bypass sandbox restrictions and write to any file path the user has permission to modify.
5
How can I mitigate the risks associated with CVE-2025-0781?
Mitigation for CVE-2025-0781 involves applying patches promptly and restricting script execution where possible.