VULNERABILITY INTELLIGENCE

CVE-2012-2107

CVSS score9.3 HIGH

EPSS probability6.69%

CISA KEVNot currently listed

Published2014-02-04

Last modified2026-06-16

Description

Integer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow.