CVE-2016-9956

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Feb 22, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-99577.8Stack-based buffer overflow in game-music-emu before 0.6.1.CVE-2016-99587.8game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.CVE-2016-99597.8game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.CVE-2016-99605.5game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).CVE-2016-99619.8game-music-emu before 0.6.1 mishandles unspecified integer values.CVE-2016-99626.4RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of CVE-2016-99635.9Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages.CVE-2016-99646.5redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233CVE-2016-99659.8Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7CVE-2016-99669.8Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7CVE-2016-99679.8Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7CVE-2016-99697.5In libwebp 0.5.1, there is a double free bug in libwebpmux.
CVE-2016-9956: High severity, CVSS 7.5 | Vulnix