REDHAT-BUG-811617: Low severity flightgear vulnerability
Multiple format string flaws were reported: [1] http://sourceforge.net/mailarchive/message.php?msgid=28957051
in the way Flight Gear, the flight simulator, and SimGear, a simulation library components performed retrieval of various data chunk values from XML aircraft (FlightGear) or scene graph (SimGear) model data files. A remote attacker could provide a specially-crafted XML model file, which once opened by a local, unsuspecting user in FlightGear / in an application linked against SimGear, would lead to that particular executable crash.
CVE Request: [2] http://www.openwall.com/lists/oss-security/2012/04/10/9
CVE Assignment: [3] http://www.openwall.com/lists/oss-security/2012/04/10/13
Upstream patch: None as of right now.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-811617?
The severity of REDHAT-BUG-811617 is categorized as potentially critical due to multiple format string vulnerabilities.
How do I fix REDHAT-BUG-811617?
To fix REDHAT-BUG-811617, update Flight Gear and SimGear to the latest patched versions.
What software is affected by REDHAT-BUG-811617?
The affected software in REDHAT-BUG-811617 includes Flight Gear and SimGear.
What are format string vulnerabilities related to REDHAT-BUG-811617?
Format string vulnerabilities in REDHAT-BUG-811617 can lead to arbitrary code execution or potential crashes.
Are there any workarounds for REDHAT-BUG-811617?
Currently, the best workaround for REDHAT-BUG-811617 is to limit the use of the vulnerable features until a patch is applied.