Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-2108

Опубликовано: 04 фев. 2014
Источник: nvd
CVSS2: 9.3
EPSS Низкий

Описание

Stack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:csounds:csound:*:*:*:*:*:*:*:*
Версия до 5.17 (включая)
cpe:2.3:a:csounds:csound:5.10:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.10.1:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.11:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.11.1:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.12:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.12.1:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.12.3:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.12.4:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.13.0:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.13.1:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.14.0:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.14.1:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.14.2:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.15.0:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.16:*:*:*:*:*:*:*
cpe:2.3:a:csounds:csound:5.16.1:*:*:*:*:*:*:*

EPSS

Процентиль: 90%
0.05809
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 12 лет назад

Stack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file.

debian
около 12 лет назад

Stack-based buffer overflow in the main function in util/lpci_main.c i ...

github
больше 3 лет назад

Stack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file.

EPSS

Процентиль: 90%
0.05809
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119