NVD

Id
43955  
Name
CVE-2012-2106  
Description
Integer overflow in the pv_import function in util/pv_import.c in Csound 5.16.6, when converting a file, allows remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-02-04  
Modified Date
2014-02-20  
Seq
2012-2106  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220815 43955 CVE-2012-2106 http://csound.git.sourceforge.net/git/gitweb.cgi?p=csound/csound5.git;a=commitdiff;h=61d1df45ca9a52bab62892a3c3a13c41e6384505#patch3  View
220816 43955 CVE-2012-2106 http://csound.git.sourceforge.net/git/gitweb.cgi?p=csound/csound5.git;a=commitdiff;h=7d617a9551fb6c552ba16874b71266fcd90f3a6f  View
220817 43955 CVE-2012-2106 openSUSE-SU-2012:0550  View
220818 43955 CVE-2012-2106 [oss-security] 20120416 CVE Requests: Multiple security flaws in csound5  View
220819 43955 CVE-2012-2106 [oss-security] 20120416 Re: CVE Requests: Multiple security flaws in csound5  View
220820 43955 CVE-2012-2106 52875  View
220821 43955 CVE-2012-2106 csound-pvimportutility-bo(74647)  View
220822 43955 CVE-2012-2106 https://bugzilla.redhat.com/show_bug.cgi?id=810802  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30423 JVNDB-2012-006131 Csound の util/pv_import.c 内の pv_import 関数における整数オーバーフローの脆弱性 Csound の util/pv_import.c 内の pv_import 関数には、ファイルを変換する場合、整数オーバーフローの脆弱性が存在します。 CVE-2012-2106 55344 CVE-2012-2106 43955 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006131.html 2012-04-04 2014-02-06 View