Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.5
CVSSv3

CVE-2017-12953

Published: 28/08/2017 Updated: 06/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Libgig

Vulnerability Summary

The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote malicious users to cause a denial of service (invalid memory write and application crash) via a crafted gig file.

Vulnerable Product Search on Vulmon Subscribe to Product

libgig0 libgig 4.0.0

Vendor Advisories

Debian CVElist Bug Report Logs: libgig: CVE-2017-12950 CVE-2017-12952 CVE-2017-12953
Debian Bug report logs - #873718 libgig: CVE-2017-12950 CVE-2017-12952 CVE-2017-12953 Package: src:libgig; Maintainer for src:libgig is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Raphael Hertzog <hertzog@debianorg> Date: Wed, 30 Aug 2017 12:51:01 UTC Severity: gr ...
Debian CVElist Bug Report Logs: libgig: CVE-2017-12951
Debian Bug report logs - #877651 libgig: CVE-2017-12951 Package: src:libgig; Maintainer for src:libgig is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Raphael Hertzog <hertzog@debianorg> Date: Wed, 30 Aug 2017 12:51:01 UTC Severity: grave Tags: security, upstream ...
Debian CVElist Bug Report Logs: libgig: CVE-2017-12954
Debian Bug report logs - #877652 libgig: CVE-2017-12954 Package: src:libgig; Maintainer for src:libgig is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Raphael Hertzog <hertzog@debianorg> Date: Wed, 30 Aug 2017 12:51:01 UTC Severity: grave Tags: security, upstream ...

Exploits

Exploit DB: libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities
================ Author : qflbwu =============== Introduction: ============= wwwlinuxsamplerorg/libgig/ libgig is a C++ library for loading, modifying existing and creating new Gigasampler (gig) files and DLS (Downloadable Sounds) Level 1/2 files, KORG sample based instruments (KSF and KMP files), SoundFont v2 (sf2) files and AKAI ...

References

CWE-787http://seclists.org/fulldisclosure/2017/Aug/39https://www.exploit-db.com/exploits/42546/https://nvd.nist.govhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873718https://www.exploit-db.com/exploits/42546/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook