REDHAT-BUG-811617
First published: Wed Apr 11 2012(Updated: )
Multiple format string flaws were reported: [1] <a href="http://sourceforge.net/mailarchive/message.php?msg_id=28957051">http://sourceforge.net/mailarchive/message.php?msg_id=28957051</a> in the way Flight Gear, the flight simulator, and SimGear, a simulation library components performed retrieval of various data chunk values from XML aircraft (FlightGear) or scene graph (SimGear) model data files. A remote attacker could provide a specially-crafted XML model file, which once opened by a local, unsuspecting user in FlightGear / in an application linked against SimGear, would lead to that particular executable crash. CVE Request: [2] <a href="http://www.openwall.com/lists/oss-security/2012/04/10/9">http://www.openwall.com/lists/oss-security/2012/04/10/9</a> CVE Assignment: [3] <a href="http://www.openwall.com/lists/oss-security/2012/04/10/13">http://www.openwall.com/lists/oss-security/2012/04/10/13</a> Upstream patch: None as of right now.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| FlightGear | ||
| SimGear |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://sourceforge.net/mailarchive/message.php?msg_id=28957051
- http://www.openwall.com/lists/oss-security/2012/04/10/9
- http://www.openwall.com/lists/oss-security/2012/04/10/13
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=811634
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=811636
- https://bugzilla.redhat.com/show_bug.cgi?id=811617
Frequently Asked Questions
What is the severity of REDHAT-BUG-811617?
The severity of REDHAT-BUG-811617 is categorized as potentially critical due to multiple format string vulnerabilities.
How do I fix REDHAT-BUG-811617?
To fix REDHAT-BUG-811617, update Flight Gear and SimGear to the latest patched versions.
What software is affected by REDHAT-BUG-811617?
The affected software in REDHAT-BUG-811617 includes Flight Gear and SimGear.
What are format string vulnerabilities related to REDHAT-BUG-811617?
Format string vulnerabilities in REDHAT-BUG-811617 can lead to arbitrary code execution or potential crashes.
Are there any workarounds for REDHAT-BUG-811617?
Currently, the best workaround for REDHAT-BUG-811617 is to limit the use of the vulnerable features until a patch is applied.
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2012-2090
- agent/severity
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/flight gear
- canonical/flightgear
- vendor/simgear
- canonical/simgear