Multiple format string vulnerabilities in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in certain data chunk values in an aircraft xml model to (1) fgfs/flightgear/src/Cockpit/panel.cxx or (2) fgfs/flightgear/src/Network/generic.cxx, or (3) a scene graph model to simgear/simgear/scene/model/SGText.cxx.

The remote host is affected by the vulnerability described in GLSA-201603-12 (FlightGear, SimGear: Multiple vulnerabilities)

    Multiple format string vulnerabilities in FlightGear and SimGear allow       user-assisted remote attackers to cause a denial of service and possibly       execute arbitrary code via format string specifiers in certain data chunk       values in an aircraft xml model.
  Impact :

    Remote attackers could possibly execute arbitrary code or cause Denial       of Service.
  Workaround :

    There is no known workaround at this time.

Fixes for CVE-2012-2090 CVE-2012-2091

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
89905	GLSA-201603-12 : FlightGear, SimGear: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
59432	Fedora 17 : FlightGear-2.6.0-2.fc17 / SimGear-2.6.0-2.fc17 (2012-8650)	Nessus	Fedora Local Security Checks	high
59431	Fedora 16 : FlightGear-2.4.0-2.fc16 / SimGear-2.4.0-4.fc16 (2012-8647)	Nessus	Fedora Local Security Checks	high
59430	Fedora 15 : FlightGear-2.0.0-6.fc15 / SimGear-2.0.0-6.fc15 (2012-8615)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2012-2090

critical

Tenable Plugins

high

high

high

high