Known Vulnerabilities for products from Swi-prolog

Listed below are 4 of the newest known vulnerabilities associated with the vendor "Swi-prolog".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2017-17524 library/www_browser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWSER en... 8.8 - HIGH 2017-12-14 2017-12-28
CVE-2012-6090 Multiple stack-based buffer overflows in the expand function in os/pl-glob.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.... 7.5 - HIGH 2013-01-04 2013-01-04
CVE-2012-6089 Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x bef... 7.5 - HIGH 2013-01-04 2013-01-04
CVE-2011-2896 The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif... 5.1 - MEDIUM 2011-08-19 2022-02-07

Known software with vulnerabilities from Swi-prolog

Type Vendor Product Version
ApplicationSwi-prologSwi-prolog1.6.1