CVE-2012-2107

Name of the Vulnerable Software and Affected Versions Csound versions prior to 5.17.2

Description The issue is related to an integer overflow in the main function of util/lpci main.c. This occurs when converting a file and allows user-assisted remote attackers to execute arbitrary code via a crafted file, triggering a heap-based buffer overflow.

Recommendations For versions prior to 5.17.2, update to version 5.17.2 or later to resolve the issue.