PT-2014-2239
CVE-2012-2107
·
تاريخ النشر
2014-02-04
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Csound versions prior to 5.17.2
Description
The issue is related to an integer overflow in the main function of util/lpci main.c. This occurs when converting a file and allows user-assisted remote attackers to execute arbitrary code via a crafted file, triggering a heap-based buffer overflow.
Recommendations
For versions prior to 5.17.2, update to version 5.17.2 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾