CVE-2012-6089

Published: Jan 4, 2013Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted filename.

Affected (39)

Products: Swi Prolog: Swi Prolog

Swi Prolog

1 product

Swi Prolog

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Swi Prolog Swi Prolog	Up to 6.2.4
Swi Prolog Swi Prolog	Version 5.10.0
Swi Prolog Swi Prolog	Version 5.10.1
Swi Prolog Swi Prolog	Version 5.10.2
Swi Prolog Swi Prolog	Version 5.10.3
Swi Prolog Swi Prolog	Version 5.10.4
Swi Prolog Swi Prolog	Version 5.10.5
Swi Prolog Swi Prolog	Version 5.6.50
Swi Prolog Swi Prolog	Version 5.6.51
Swi Prolog Swi Prolog	Version 5.6.52
Swi Prolog Swi Prolog	Version 5.6.53
Swi Prolog Swi Prolog	Version 5.6.54
Swi Prolog Swi Prolog	Version 5.6.55
Swi Prolog Swi Prolog	Version 5.6.56
Swi Prolog Swi Prolog	Version 5.6.57
Swi Prolog Swi Prolog	Version 5.6.58
Swi Prolog Swi Prolog	Version 5.6.59
Swi Prolog Swi Prolog	Version 5.6.61
Swi Prolog Swi Prolog	Version 5.6.62
Swi Prolog Swi Prolog	Version 5.6.63
Swi Prolog Swi Prolog	Version 5.6.64
Swi Prolog Swi Prolog	Version 5.8.0
Swi Prolog Swi Prolog	Version 5.8.1
Swi Prolog Swi Prolog	Version 5.8.2
Swi Prolog Swi Prolog	Version 5.8.3
Swi Prolog Swi Prolog	Version 6.0.0
Swi Prolog Swi Prolog	Version 6.0.1
Swi Prolog Swi Prolog	Version 6.0.2
Swi Prolog Swi Prolog	Version 6.2.0
Swi Prolog Swi Prolog	Version 6.2.1
Swi Prolog Swi Prolog	Version 6.2.2
Swi Prolog Swi Prolog	Version 6.2.3

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Swi Prolog Swi Prolog	Version 6.3.0
Swi Prolog Swi Prolog	Version 6.3.1
Swi Prolog Swi Prolog	Version 6.3.2
Swi Prolog Swi Prolog	Version 6.3.3
Swi Prolog Swi Prolog	Version 6.3.4
Swi Prolog Swi Prolog	Version 6.3.5
Swi Prolog Swi Prolog	Version 6.3.6