CVE-2012-0824EUVD-2012-085019.11.2019, 16:15gnusound 0.7.5 has format string issueEnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTPrimary9.8 CRITICALNETWORKLOWNONECVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HBase ScoreCVSS 3.xEPSS ScorePercentile: 65%Affected Products (NVD)VendorProductVersiongnugnusound0.7.5𝑥= Vulnerable software versionsUbuntu ReleasesUbuntu ProductCodenamegnusoundhardyignoredlucidignoredmaverickignorednattyignoredoneiricdneprecisednequantaldneraringdnesaucydneCommon Weakness EnumerationCWE-134 - Use of Externally-Controlled Format StringThe software uses a function that accepts a format string as an argument, but the format string originates from an external source.Referenceshttp://www.openwall.com/lists/oss-security/2012/01/31/3https://access.redhat.com/security/cve/cve-2012-0824https://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-0824.htmlhttps://security-tracker.debian.org/tracker/CVE-2012-0824http://www.openwall.com/lists/oss-security/2012/01/31/3https://access.redhat.com/security/cve/cve-2012-0824https://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-0824.htmlhttps://security-tracker.debian.org/tracker/CVE-2012-0824
