CVE-2012-2091

CVE-2012-2091 describes multiple buffer overflow vulnerabilities in FlightGear and SimGear versions 2.6 and earlier. These flaws can be triggered by a long string in an aircraft XML model's rotor tag or a crafted UDP packet, affecting the Rotor::getValueforFGSet and SGSocketUDP::read functions, respectively. With a CVSS score of 9.3, this vulnerability is critical, allowing unauthenticated remote attackers to cause a denial of service (crash) and potentially execute arbitrary code with medium attack complexity. Despite its high severity, there is no evidence of active exploitation, no publicly available exploit code in Metasploit or ExploitDB, and minimal community discussion or media coverage.