CVE-2012-0270
Csound < 5.16.6 - Remote Code Execution via Crafted HETRO or PVOC File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-0270.
PoCs published by Metasploit, Secunia, juan vazquez, including Metasploit module exploits/windows/fileformat/csound_getnum_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Csound before 5.16.6 via a malicious hetro file. It achieves remote code execution by overwriting the return address and executing payload shellcode.
Description
Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted (1) hetro file to the getnum function in util/heti_main.c or (2) PVOC file to the getnum function in util/pv_import.c.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in Csound before 5.16.6 via a malicious hetro file. It achieves remote code execution by overwriting the return address and executing payload shellcode.
This Metasploit module exploits a stack buffer overflow in Csound before 5.16.6 via a malicious hetro file. It achieves remote code execution by overwriting the return address and executing shellcode.