Libgig0

4 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-12954 Aug 28, 19:29 MEDIUM POC This Month

The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted gig file. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Information Disclosure Libgig Libgig0

NVD Exploit-DB

CVSS 3.0

6.5

EPSS

3.1%

CVE-2017-12953 Aug 28, 19:29 MEDIUM POC This Month

The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory write and application crash) via a crafted gig file. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Libgig Libgig0

NVD Exploit-DB

CVSS 3.0

6.5

EPSS

3.1%

CVE-2017-12952 Aug 28, 19:29 MEDIUM POC This Month

The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Libgig Libgig0

NVD Exploit-DB

CVSS 3.0

6.5

EPSS

4.7%

CVE-2017-12951 Aug 28, 19:29 MEDIUM POC This Month

The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Information Disclosure Libgig Libgig0

NVD Exploit-DB

CVSS 3.0

6.5

EPSS

3.1%

CVE-2017-12954

EPSS 3% CVSS 6.5

MEDIUM POC This Month

Buffer Overflow Denial Of Service Information Disclosure +2

NVD Exploit-DB

CVE-2017-12953

EPSS 3% CVSS 6.5

MEDIUM POC This Month

Buffer Overflow Denial Of Service Memory Corruption +2

NVD Exploit-DB

CVE-2017-12952

EPSS 5% CVSS 6.5

MEDIUM POC This Month

Denial Of Service Null Pointer Dereference Libgig +1

NVD Exploit-DB

CVE-2017-12951

EPSS 3% CVSS 6.5

MEDIUM POC This Month

Buffer Overflow Denial Of Service Information Disclosure +2

NVD Exploit-DB