CVE-2012-2091
Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user...
Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx.
- Record
CVE-2012-2091- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx.
- Record
CVE-2012-2091- Updated
- 2026-11-02
EUVDEUVD-2012-2097 No score
Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx.
- Record
EUVD-2012-2097- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4p68-9fv9-q323 No score
Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user...
Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx.
- Record
GHSA-4p68-9fv9-q323- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx.
- Record
CVE-2012-2091- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2091 No score
Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx.
- Record
DEBIAN-CVE-2012-2091- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flightgearDebian:12 |
before 2.6.0-1.1 | 2.6.0-1.1 |
flightgearDebian:13 |
before 2.6.0-1.1 | 2.6.0-1.1 |
simgearDebian:12 |
before 2.10.0-3 | 2.10.0-3 |
simgearDebian:13 |
before 2.10.0-3 | 2.10.0-3 |
simgearDebian:14 |
before 2.10.0-3 | 2.10.0-3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2091 is a high vulnerability (CVSS 9.3) in Flightgear, published June 17, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.39%, the 93rd percentile. Fixed in flightgear 2.6.0-1.1.
References
secunia.com/advisories/48780
lists.fedoraproject.org/pipermail/package-announce/2012-June/082017.html
openwall.com/lists/oss-security/2012/04/10/13
bugzilla.redhat.com/show_bug.cgi?id=811617
security.gentoo.org/glsa/201603-12
Show 6 moreShow less
sourceforge.net/mailarchive/message.php?msg_id=29012174
nvd.nist.gov/vuln/detail/CVE-2012-2091
github.com/advisories/GHSA-4p68-9fv9-q323
security-tracker.debian.org/tracker/CVE-2012-2091