What’s Vulnerable › Vulnerabilities

CVE-2012-6089

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-01-04 · updated 2026-06-16
• Weakness: CWE-119

Description

Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted filename.

Affected products

• Swi-Prolog: through 6.2.4; 5.6.50, 5.6.51, 5.6.52, 5.6.53, 5.6.54, 5.6.55 (+32)

References

• http://openwall.com/lists/oss-security/2013/01/03/7
• http://www.swi-prolog.org/git/pl.git/commit/a9a6fc8a2a9cf3b9154b490a4b1ffaa8be4d723c
• https://bugzilla.redhat.com/show_bug.cgi?id=891577
• https://lists.iai.uni-bonn.de/pipermail/swi-prolog/2012/009428.html
• http://openwall.com/lists/oss-security/2013/01/03/7
• http://www.swi-prolog.org/git/pl.git/commit/a9a6fc8a2a9cf3b9154b490a4b1ffaa8be4d723c
• https://bugzilla.redhat.com/show_bug.cgi?id=891577
• https://lists.iai.uni-bonn.de/pipermail/swi-prolog/2012/009428.html

Get alerted when CVE-2012-6089 or the next vulnerability affects your stack