CVE-2012-6089
CVE-2012-6089
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted filename.
EPSS 4.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
swi-prolog Debian:12
- Affected ranges
- ECOSYSTEM: < 5.10.4-5
Update to 5.10.4-5
swi-prolog Debian:13
- Affected ranges
- ECOSYSTEM: < 5.10.4-5
Update to 5.10.4-5
swi-prolog Debian:14
- Affected ranges
- ECOSYSTEM: < 5.10.4-5
Update to 5.10.4-5