CVE-2012-3407

CVE-2012-3407 concerns the open-source utility plow (a command-line playlist generator). Connected sources indicate a local buffer overflow vulnerability in plow. The CNVD entry explains the root cause as memory operations performed without proper data boundary validation, leading to reads/writes...