| Package | Affected versions | Patched versions |
|---|---|---|
| csound | = 5.10= 5.10.1= 5.11= 5.11.1= 5.12= 5.12.1= 5.12.3= 5.12.4= 5.13.0= 5.13.1= 5.14.0= 5.14.1= 5.14.2= 5.15.0= 5.16= 5.16.1≤ 5.17 |
Integer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free