NVD

Id
43956  
Name
CVE-2012-2107  
Description
Integer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-02-04  
Modified Date
2014-02-20  
Seq
2012-2107  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220823 43956 CVE-2012-2107 http://csound.git.sourceforge.net/git/gitweb.cgi?p=csound/csound5.git;a=commitdiff;h=61d1df45ca9a52bab62892a3c3a13c41e6384505#patch2  View
220824 43956 CVE-2012-2107 openSUSE-SU-2012:0550  View
220825 43956 CVE-2012-2107 [oss-security] 20120416 CVE Requests: Multiple security flaws in csound5  View
220826 43956 CVE-2012-2107 [oss-security] 20120416 Re: CVE Requests: Multiple security flaws in csound5  View
220827 43956 CVE-2012-2107 52876  View
220828 43956 CVE-2012-2107 csound-pcimain-bo(74650)  View
220829 43956 CVE-2012-2107 https://bugzilla.redhat.com/show_bug.cgi?id=810807  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30424 JVNDB-2012-006132 Csound の util/lpci_main.c 内の main 関数における整数オーバーフローの脆弱性 Csound の util/lpci_main.c 内の main 関数には、ファイルを変換する場合、整数オーバーフローの脆弱性が存在します。 CVE-2012-2107 55345 CVE-2012-2107 43956 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006132.html 2012-04-04 2014-02-06 View