CVE-2012-1189
Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car...
CVE-2012-1189 is a high vulnerability (CVSS 9.3) in Bernhard Wymann Torcs, published October 8, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.59%, the 95th percentile. Fixed in torcs 1.3.3-1.
Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file.
- Record
CVE-2012-1189- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file.
- Record
CVE-2012-1189- Updated
- 2026-11-02
EUVDEUVD-2012-1217 No score
Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file.
- Record
EUVD-2012-1217- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hx2c-qfwc-wm58 No score
Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car...
Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file.
- Record
GHSA-hx2c-qfwc-wm58- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file.
- Record
CVE-2012-1189- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-1189 No score
Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file.
- Record
DEBIAN-CVE-2012-1189- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | TORCS 1.3.2 - '.xml' File Buffer Overflow /SafeSEH Evasion | 2012-02-08 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
freecode.com/projects/torcs/releases/341672
torcs.sourceforge.net/index.php?name=News&file=article&sid=79
exploit-db.com/exploits/18471
openwall.com/lists/oss-security/2012/02/18/2
osvdb.org/79372
nvd.nist.gov/vuln/detail/CVE-2012-1189
github.com/advisories/GHSA-hx2c-qfwc-wm58
security-tracker.debian.org/tracker/CVE-2012-1189