← Back

CVE-2012-2108

nvd nist
Published: Feb 4, 2014Modified: Apr 29, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Stack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file.

Affected (17)

Products: Csounds: Csound
1 product
Csound
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Csounds
Up to 5.17
Version 5.10.1
Version 5.10
Version 5.11.1
Version 5.11
Version 5.12.1
Version 5.12.3
Version 5.12.4
Version 5.12
Version 5.13.0
Version 5.13.1
Version 5.14.0
Version 5.14.1
Version 5.14.2
Version 5.15.0
Version 5.16.1
Version 5.16

References (20)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.