CVE-2012-1189
EPSS 9.6%
Description
Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file.
How to fix CVE-2012-1189
To remediate CVE-2012-1189, upgrade the affected package to a fixed version below.
- Debian/torcs—upgrade to 1.3.3-1 or later
Is CVE-2012-1189 being exploited?
Moderate — EPSS is 9.6%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 1.3.3-1