Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-1189
HistoryOct 08, 2012 - 12:00 a.m.

CVE-2012-1189

2012-10-0800:00:00
ubuntu.com
ubuntu.com
4

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.135

Percentile

95.7%

Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The
Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows
user-assisted remote attackers to execute arbitrary code via a long file
name in an engine sample attribute in an xml configuration file.

Bugs

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.135

Percentile

95.7%