NVD

Id
43957  
Name
CVE-2012-2108  
Description
Stack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-02-04  
Modified Date
2014-02-20  
Seq
2012-2108  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220830 43957 CVE-2012-2108 http://csound.git.sourceforge.net/git/gitweb.cgi?p=csound/csound5.git;a=commitdiff;h=61d1df45ca9a52bab62892a3c3a13c41e6384505  View
220831 43957 CVE-2012-2108 openSUSE-SU-2012:0550  View
220832 43957 CVE-2012-2108 [oss-security] 20120416 CVE Requests: Multiple security flaws in csound5  View
220833 43957 CVE-2012-2108 [oss-security] 20120416 Re: CVE Requests: Multiple security flaws in csound5  View
220834 43957 CVE-2012-2108 52876  View
220835 43957 CVE-2012-2108 csound-main-bo(74649)  View
220836 43957 CVE-2012-2108 https://bugzilla.redhat.com/show_bug.cgi?id=810810  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30425 JVNDB-2012-006133 Csound の util/lpci_main.c 内の main 関数におけるスタックベースのバッファオーバーフローの脆弱性 Csound の util/lpci_main.c 内の main 関数には、ファイルを変換する場合、整数オーバーフローの脆弱性が存在します。 CVE-2012-2108 55346 CVE-2012-2108 43957 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006133.html 2012-04-04 2014-02-06 View