Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.121454
Category:Gentoo Local Security Checks
Title:Gentoo Security Advisory GLSA 201603-12
Summary:Gentoo Linux Local Security Checks
Description:Summary:
Gentoo Linux Local Security Checks

Vulnerability Insight:
Multiple format string vulnerabilities in FlightGear and SimGear allow user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in certain data chunk values in an aircraft xml model.

Solution:
Update the affected packages to the latest available version.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2012-2090
48780
http://secunia.com/advisories/48780
FEDORA-2012-8615
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082017.html
FEDORA-2012-8647
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081997.html
FEDORA-2012-8650
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082002.html
GLSA-201603-12
https://security.gentoo.org/glsa/201603-12
[Flightgear-devel] 20120309 Flightgear and Simgear multiple format string vulnerabilities
http://sourceforge.net/mailarchive/message.php?msg_id=28957051
[Flightgear-devel] 20120320 Re: Flightgear and Simgear multiple format string vulnerabilities
http://sourceforge.net/mailarchive/message.php?msg_id=29012174
[oss-security] 20120410 Re: CVE Request: FlightGear and Simgear Multiple vulnerabilities
http://www.openwall.com/lists/oss-security/2012/04/10/13
flightgear-xml-format-string(74791)
https://exchange.xforce.ibmcloud.com/vulnerabilities/74791
https://bugzilla.redhat.com/show_bug.cgi?id=811617
Common Vulnerability Exposure (CVE) ID: CVE-2012-2091
CopyrightCopyright (C) 2016 Eero Volotinen

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.