Lucene search

K
cvelistMitreCVELIST:CVE-2017-1000173
HistoryNov 17, 2017 - 3:00 a.m.

CVE-2017-1000173

2017-11-1703:00:00
mitre
www.cve.org
2
creolabs gravity
version 1.0
heap overflow
code execution
bounds checking
buffer
heap-buffer-overflow

AI Score

9.6

Confidence

High

EPSS

0.005

Percentile

76.4%

Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to a buffer, we can break out of the bounds checking of that buffer. When list.join is called on the data it will read past a buffer resulting in a Heap-Buffer-Overflow.

AI Score

9.6

Confidence

High

EPSS

0.005

Percentile

76.4%

Related for CVELIST:CVE-2017-1000173