1. CVE-Search
  2. CVE-2012-2107
ID CVE-2012-2107
Summary Integer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow.
References
Vulnerable Configurations
  • cpe:2.3:a:csounds:csound:5.13.0:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.13.0:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.14.2:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.14.2:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.10:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.10:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.11.1:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.11.1:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.12.3:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.12.3:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.11:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.11:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.10.1:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.10.1:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.16:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.16:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.14.1:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.14.1:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.16.1:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.16.1:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.12.1:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.12.1:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.12:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.12:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.12.4:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.12.4:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.13.1:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.13.1:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.14.0:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.14.0:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.15.0:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.15.0:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.16.6:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.16.6:*:*:*:*:*:*:*
  • cpe:2.3:a:csounds:csound:5.17:*:*:*:*:*:*:*
    cpe:2.3:a:csounds:csound:5.17:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 13-02-2023 - 04:33)
Impact:
Exploitability:
CWE CWE-189
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
refmap via4
bid 52876
confirm http://csound.git.sourceforge.net/git/gitweb.cgi?p=csound/csound5.git;a=commitdiff;h=61d1df45ca9a52bab62892a3c3a13c41e6384505#patch2
misc
mlist
  • [oss-security] 20120416 CVE Requests: Multiple security flaws in csound5
  • [oss-security] 20120416 Re: CVE Requests: Multiple security flaws in csound5
osvdb 81015
secunia 48719
suse openSUSE-SU-2012:0550
xf csound-pcimain-bo(74650)
Last major update 13-02-2023 - 04:33
Published 04-02-2014 - 21:55
Last modified 13-02-2023 - 04:33
Back to Top