Buffer overflow in Swi-Prolog

CVE-2012-6090

Multiple stack-based buffer overflows in the expand function in os/pl-glob.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted filename.

Vulnerability class: Buffer Overflow

EPSS: 0.031 (86.5th percentile) — read the EPSS interpretation.

Affected products

  • Swi-prolog — versions 5.6.50, 5.6.51, 5.6.52
  • N/a — versions n/a

Weakness classification (CWE)

References