1313 matches found
CVE-2017-1000173
Creolabs Gravity 1.0 is affected by a heap-buffer-overflow vulnerability. The issue arises from constructing a large loop that pushes data into a buffer, allowing an out-of-bounds read when list.join is invoked, breaking bounds checking and triggering potential code execution. The CVE details exp...
CVE-2017-1000172
Creolabs Gravity 1.0 is affected by a Heap Use-After-Free in gravity_lexer.c (line 542) where the sublexer pointer is freed but still used via lexer , enabling possible code execution. This vulnerability is documented across multiple sources (NVD, Red Hat, CNVD, CNVD-like listings). The available...
Creolabs Gravity 'memcmp' function buffer overflow vulnerability
Creolabs Gravity is an open source lightweight embedded programming language from Creolabs, Italy. The language supports procedural programming, object-oriented programming, functional programming and data-driven programming. A buffer overflow vulnerability exists in the 'memcmp' function in...
Creolabs Gravity Stack Buffer Overflow Vulnerability
Creolabs Gravity is an open source lightweight embedded programming language from Creolabs, Italy. The language supports procedural programming, object-oriented programming, functional programming and data-driven programming. A stack buffer overflow vulnerability exists in the 'stringrepeat'...
Creolabs Gravity Heap Overflow Vulnerability
Creolabs Gravity is an open source lightweight embedded programming language from Creolabs, Italy. The language supports procedural programming, object-oriented programming, functional programming and data-driven programming. A heap overflow vulnerability exists in Creolabs Gravity version 1.0. A...
Creolabs Gravity Double Release Vulnerability
Creolabs Gravity is an open source lightweight embedded programming language from Creolabs, Italy. The language supports procedural programming, object-oriented programming, functional programming and data-driven programming. A double release vulnerability exists in gravityvalue in Creolabs Gravi...
CVE-2017-1000073
Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution...
CVE-2017-1000074
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the stringrepeat function...
CVE-2017-1000072
Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravityvalue resulting potentially leading to modification of unexpected memory locations...
CVE-2017-1000075
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function...
CVE-2017-1000075
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function...
CVE-2017-1000074
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the stringrepeat function...
CVE-2017-1000073
Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution...
CVE-2017-1000072
Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravityvalue resulting potentially leading to modification of unexpected memory locations...
Double free
Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravityvalue resulting potentially leading to modification of unexpected memory locations...
Stack overflow
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the stringrepeat function...
Stack overflow
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function...
Heap overflow
Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution...
CVE-2017-1000075
Creolabs Gravity 1.0 is vulnerable to a stack/buffer overflow in the memcmp function. CNVD-2017-27179 describes a buffer overflow in memcmp for Gravity 1.0, with an attacker able to exploit this vulnerability to terminate a process (infinite loop). No remediation details are provided in the conne...
