CVE-2012-2107

Integer overflow in the main function in util/lpci_main.c in Csound before
5.17.2, when converting a file, allows user-assisted remote attackers to
execute arbitrary code via a crafted file, which triggers a heap-based
buffer overflow.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661197&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=810807&gt;