UBUNTU-CVE-2012-2108

Stack-based buffer overflow in the main function in util/lpcimain.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file...

CVE-2012-2106

Integer overflow in the pvimport function in util/pvimport.c in Csound 5.16.6, when converting a file, allows remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow...

CVE-2012-2106

Integer overflow in the pvimport function in util/pvimport.c in Csound 5.16.6, when converting a file, allows remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow...

CVE-2012-2107

Integer overflow in the main function in util/lpcimain.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow...

CVE-2012-2108

Stack-based buffer overflow in the main function in util/lpcimain.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file...

CVE-2012-2106

CVE-2012-2106 affects Csound 5.16.6, where an integer overflow in pv_import.c during file conversion enables a heap-based buffer overflow that could allow remote code execution. Several advisories reference the same issue and market it as a remote vulnerability (exploitable via crafted files). Re...

CVE-2012-2108

Csound (affected component: util/lpci_main.c in the core for file conversion) has a stack-based buffer overflow in the main function, exploitable by crafting a file to cause remote code execution. This occurs in versions before 5.17.2. Remediation in documented contexts includes upgrading to a fi...

CVE-2012-2108

Stack-based buffer overflow in the main function in util/lpcimain.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file...

CVE-2012-2107

Integer overflow in the main function in util/lpcimain.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow...

CVE-2012-2107

Csound prior to 5.17.2 suffers an integer overflow in util/lpci_main.c during file conversion, triggering a heap-based buffer overflow that could allow remote code execution. This is documented across multiple sources (SUSE/OpenSUSE, Ubuntu, Debian osv, etc.). Affected version: Csound

CVE-2012-2107: Undefined Security Weakness

Integer overflow in the main function in util/lpcimain.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow...

PT-2014-2238

Name of the Vulnerable Software and Affected Versions Csound versions prior to 5.16.6 Description The issue is related to an integer overflow in the pv import function, located in util/lpv import.c, which occurs when converting a file. This allows remote attackers to execute arbitrary code throug...

CVE-2012-2106: Undefined Security Weakness

Integer overflow in the pvimport function in util/pvimport.c in Csound 5.16.6, when converting a file, allows remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow...

PT-2014-2239

Name of the Vulnerable Software and Affected Versions Csound versions prior to 5.17.2 Description The issue is related to an integer overflow in the main function of util/lpci main.c. This occurs when converting a file and allows user-assisted remote attackers to execute arbitrary code via a...

CVE-2012-2108: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the main function in util/lpcimain.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file...

Csound Hetro File Handling Stack Buffer Overflow (CVE-2012-0270)

A stack buffer overflow vulnerability has been reported in Csound. The vulnerability is due to the improper validation of specially crafted hetro files. A remote attacker can exploit this issue by enticing the victim to accept and open a specially crafted file. Successful exploitation would resul...

SuSE Update for csound openSUSE-SU-2012:0315-1 (csound)

Check for the Version of csound OpenVAS Vulnerability Test $Id: gbsuse201203151.nasl 8249 2017-12-27 06:29:56Z teissa $ SuSE Update for csound openSUSE-SU-2012:0315-1 csound Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...

openSUSE: Security Advisory for csound (openSUSE-SU-2012:0315-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Csound util/lpci_main.c main() Function Multiple Buffer Overflows

The version of Csound installed on the remote Windows host is less than 5.17.2. As such, it is reportedly affected by a stack- and a heap-based buffer overflow present in the util/lpcimain.c main function. By tricking a user into opening a specially crafted file, an attacker may be able to execut...

Csound getnum() getnum Function Multiple Buffer Overflows

The version of Csound installed on the remote Windows host is less than 5.16.6. As such, it is reportedly affected by multiple stack- based buffer overflows present in the getnum function located in util/hetimain.c and util/pvimport.c By tricking a user into opening a specially crafted file, an...