Vulnerabilities > Flightgear
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2017-08-27 | CVE-2017-13709 | Improper Input Validation vulnerability in Flightgear 2017.2.1 In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree. | 7.5 |
2017-05-12 | CVE-2017-8921 | Path Traversal vulnerability in Flightgear In FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has write access to, but not with arbitrary data: only with the contents of a FlightGear flightplan (XML). | 7.5 |
2017-02-22 | CVE-2016-9956 | Improper Access Control vulnerability in multiple products The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script. | 7.5 |