Multiple format string flaws were reported: [1] http://sourceforge.net/mailarchive/message.php?msgid=28957051

in the way Flight Gear, the flight simulator, and SimGear, a simulation library components performed retrieval of various data chunk values from XML aircraft (FlightGear) or scene graph (SimGear) model data files. A remote attacker could provide a specially-crafted XML model file, which once opened by a local, unsuspecting user in FlightGear / in an application linked against SimGear, would lead to that particular executable crash.

CVE Request: [2] http://www.openwall.com/lists/oss-security/2012/04/10/9

CVE Assignment: [3] http://www.openwall.com/lists/oss-security/2012/04/10/13

Upstream patch: None as of right now.