Code injection

In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree...

CVE-2017-13709

In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree...

CVE-2017-13709

CVE-2017-13709 affects FlightGear prior to version 2017.3.1. The FGLogger subsystem’s Main/logger.cxx allows overwriting arbitrary files via a resource that can alter the contents of the global Property Tree, enabling an attacker with write access to cause data corruption or disclosure in affecte...