CVE-2012-0270 Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted (1) hetro file to the getnum function in util/heti_main.c or (2) PVOC file....
HighCVSS 7.5
EPSS 54.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted (1) hetro file to the getnum function in util/heti_main.c or (2) PVOC file to the getnum function in util/pv_import.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/csound(Debian:12) | < 1:5.16.6~dfsg-1 | 1:5.16.6~dfsg-1 |
| debian/csound(Debian:13) | < 1:5.16.6~dfsg-1 | 1:5.16.6~dfsg-1 |
| debian/csound(Debian:14) | < 1:5.16.6~dfsg-1 | 1:5.16.6~dfsg-1 |
| csounds csound | <= 5.16.1 | No fix listed |
| csounds csound | = 5.12.4 | No fix listed |
| csounds csound | = 5.13.0 | No fix listed |
| csounds csound | = 5.13.1 | No fix listed |
| csounds csound | = 5.14.0 | No fix listed |
| csounds csound | = 5.14.1 | No fix listed |
| csounds csound | = 5.14.2 | No fix listed |
| csounds csound | = 5.15.0 | No fix listed |
| csounds csound | = 5.16 | No fix listed |
References
- Debian Security Tracker CVE-2012-0270 vendor-advisory
- bugs.debian.org issue-tracking
- openSUSE-SU-2012:0315 vendor-advisory
- openSUSE-SU-2012:0370 vendor-advisory
- 47585 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- sourceforge.net vendor-advisory