CVE-2017-13709 In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree.
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/flightgear(Debian:12) | < 1:2017.2.1+dfsg-4 | 1:2017.2.1+dfsg-4 |
| debian/flightgear(Debian:13) | < 1:2017.2.1+dfsg-4 | 1:2017.2.1+dfsg-4 |
| flightgear | = 2017.2.1 | No fix listed |
References
- Debian Security Tracker CVE-2017-13709 vendor-advisory
- sourceforge.net exploit third-party-advisory
- sourceforge.net exploit third-party-advisory
- bugs.debian.org issue-tracking