VDB
CVE-2012-0270
CVE-2012-0270
PUBLISHED
CVSS 7.5 HIGH
Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted (1) hetro file to the getnum function in util/heti_main.c or (2) PVOC file to the getnum function in util/pv_import.c.
EPSS 54.67% · 98.9th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
54.67%
98.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| csounds | csound | 5.13.0, 0, 5.12.4 |
| n/a | n/a | * |
Timeline
- CVE Published
- May 29, 2018 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
References
- http://secunia.com/secunia_research/2012-3/ url
- 47585 third-party-advisory
- openSUSE-SU-2012:0370 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2012-0270 advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00027.html url
- http://secunia.com/secunia_research/2012-3 url
- http://sourceforge.net/projects/csound/files/csound5/csound5.16/Version5.16_Notes/view advisory