CVE-2012-2090

🗓️ 17 Jun 2012 01:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 57 Views🌐 WEB

Multiple format string vulnerabilities in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allowing remote attackers to cause denial of service and potentially execute arbitrary code via format string specifiers.

Reporter	Title	Published	Views	Family All 34
Circl	CVE-2012-2090	17 Oct 202517:52	–	circl
Cvelist	CVE-2012-2090	17 Jun 201201:00	–	cvelist
Debian CVE	CVE-2012-2090	17 Jun 201201:00	–	debiancve
EUVD	EUVD-2012-2096	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 15 Update: SimGear-2.0.0-6.fc15	9 Jun 201200:01	–	fedora
Fedora	[SECURITY] Fedora 16 Update: FlightGear-2.4.0-2.fc16	8 Jun 201223:57	–	fedora
Fedora	[SECURITY] Fedora 16 Update: SimGear-2.4.0-4.fc16	8 Jun 201223:57	–	fedora
Fedora	[SECURITY] Fedora 17 Update: FlightGear-2.6.0-3.fc17	29 May 201300:56	–	fedora
Fedora	[SECURITY] Fedora 17 Update: FlightGear-2.6.0-2.fc17	8 Jun 201223:58	–	fedora
Fedora	[SECURITY] Fedora 17 Update: SimGear-2.6.0-2.fc17	8 Jun 201223:58	–	fedora

NVD

Node

flightgear flightgearRange≤2.6.0

flightgear flightgearMatch1.9.1

flightgear flightgearMatch2.0.0

simgear simgearRange≤2.6.0

simgear simgearMatch1.9.1

simgear simgearMatch2.0.0

Source	Link
sourceforge	www.sourceforge.net/mailarchive/message.php
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/74791
openwall	www.openwall.com/lists/oss-security/2012/04/10/13
lists	www.lists.fedoraproject.org/pipermail/package-announce/2012-June/082002.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.fedoraproject.org/pipermail/package-announce/2012-June/082017.html
secunia	www.secunia.com/advisories/48780
lists	www.lists.fedoraproject.org/pipermail/package-announce/2012-June/081997.html
security	www.security.gentoo.org/glsa/201603-12
sourceforge	www.sourceforge.net/mailarchive/message.php

Parameter	Position	Path	Description	CWE
format string specifiers in data chunk values in aircraft xml model	path	fgfs/flightgear/src/Cockpit/panel.cxx	Format string vulnerability in Cockpit panel code processing aircraft XML model data chunks	CWE-134
format string specifiers in data chunk values in aircraft xml model	path	fgfs/flightgear/src/Network/generic.cxx	Format string vulnerability in Network generic code processing aircraft XML model data chunks	CWE-134
format string specifiers in data chunk values in aircraft xml model	path	simgear/simgear/scene/model/SGText.cxx	Format string vulnerability in SGText scene graph model handling data chunks in aircraft XML model	CWE-134

16 Jun 2026 23:40Current

7.7High risk

Vulners AI Score7.7

CVSS 29.3

EPSS0.05997

CWE-134