NetSight
IP …
high7.5Public exploit code

CVE-2012-0270

Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted (1) hetro file to the getnum funct…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted (1) hetro file to the getnum function in util/heti_main.c or (2) PVOC file to the getnum function in util/pv_import.c.

Affected products

VendorProductAffected versions
CsoundsCsound
through 5.16.1
Versions 5.12.4, 5.13.0, 5.13.1, 5.14.0, 5.14.1

Weakness classification

CWE-119

References