CVE-2017-1000073
CriticalSummary
Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution.
Risk Assessment
Exploitation of this vulnerability could allow attackers to remotely execute malicious code, posing a serious security threat to the system.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability and to monitor the system for unauthorized activities.
Other vulnerabilities in Creolabs Gravity 1.0
See all- CVE-2026-40504Critical
A heap buffer overflow vulnerability exists in Creolabs Gravity before version 0.9.6 in the gravity_vm_exec function. Attackers can exploit scripts with many string literals at global scope to write out-of-bounds memory.
- CVE-2017-1000173Critical
In Creolabs Gravity version 1.0, there is a heap buffer overflow vulnerability that may lead to code execution. By creating a large loop while pushing data to a buffer, the bounds checking of that buffer can be bypassed.
- CVE-2017-1000075Critical
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function.
- CVE-2017-1000074Critical
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function.
Original NVD description (English source)
Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution.