Csound 'main () 'Stack Buffer Overflow and Integer Overflow

Release date:
Updated on:

Affected Systems:
Csound 5.16.6
Unaffected system:
Csound 5.17.2
Description:
--------------------------------------------------------------------------------
Bugtraq id: 52876

Csound is a sound and music Synthesis System.

Csound has two vulnerabilities in the implementation of the "main ()" function (util/lpci_main.c) and "main ()" function (util/lpci_main.c, attackers can exploit this vulnerability to cause heap and stack buffer overflow to control user systems.

<* Source: Secunia Research

Link: http://secunia.com/advisories/48148/

*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Csound
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://csound.sourceforge.net/