CVE-2017-1000173
CriticalSummary
In Creolabs Gravity version 1.0, there is a heap buffer overflow vulnerability that may lead to code execution. By creating a large loop while pushing data to a buffer, the bounds checking of that buffer can be bypassed.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code within the application's context, potentially leading to serious security implications.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability and to monitor the application for any unusual activities.
Original NVD description (English source)
Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to a buffer, we can break out of the bounds checking of that buffer. When list.join is called on the data it will read past a buffer resulting in a Heap-Buffer-Overflow.