CVE-2012-2106

概要

参考情報

• csound.git.sourceforge.net/git/gitweb.cgi
• csound.git.sourceforge.net/git/gitweb.cgi
• lists.opensuse.org/opensuse-updates/2012-04/msg00057.html
• secunia.com/advisories/48148 · Vendor Advisory
• secunia.com/secunia_research/2012-7 · Vendor Advisory
• openwall.com/lists/oss-security/2012/04/16/1
• openwall.com/lists/oss-security/2012/04/16/9
• osvdb.org/81016
• securityfocus.com/bid/52875
• bugzilla.redhat.com/show_bug.cgi
• exchange.xforce.ibmcloud.com/vulnerabilities/74647

csound のその他の脆弱性

• CVE-2012-0270高 7.5Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted (1) hetro file …
• CVE-2012-2108緊急 9.3Stack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted r…
• CVE-2012-2107緊急 9.3Integer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attac…