What’s Vulnerable › Vulnerabilities
CVE-2018-7259
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-02-20 · updated 2026-06-17
- Weakness: CWE-319
Description
The FSX / P3Dv4 installer 2.0.1.231 for Flight Sim Labs A320-X sends a user's Google account credentials to http://installLog.flightsimlabs.com/LogHandler3.ashx if a pirated serial number has been entered, which allows remote attackers to obtain sensitive information, e.g., by sniffing the network for cleartext HTTP traffic. This behavior was removed in 2.0.1.232.
Affected products
- Flightsimlabs A320-X: 2.0.1.231
References
- https://forums.flightsimlabs.com/index.php?/topic/16210-malware-in-installer/
- https://medium.com/%40lukegorman97/flightsimlabs-alleged-malware-analysis-1427c4d23368
- https://www.reddit.com/r/flightsim/comments/7yh4zu/fslabs_a320_installer_seems_to_include_a_chrome/
- https://forums.flightsimlabs.com/index.php?/topic/16210-malware-in-installer/
- https://medium.com/%40lukegorman97/flightsimlabs-alleged-malware-analysis-1427c4d23368
- https://www.reddit.com/r/flightsim/comments/7yh4zu/fslabs_a320_installer_seems_to_include_a_chrome/
Get alerted when CVE-2018-7259 or the next vulnerability affects your stack