NetSight
IP …
high7.5

CVE-2012-6089

Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers t…

Impact

Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted filename.

Affected products

VendorProductAffected versions
Swi-PrologSwi-Prolog
through 6.2.4
Versions 5.6.50, 5.6.51, 5.6.52, 5.6.53, 5.6.54

Weakness classification

CWE-119

References