medium6.5Public exploit code
CVE-2017-12954
The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and applic…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities2017-08-23 · dos · linux
Impact
The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted gig file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libgig0 | Libgig | Version 4.0.0 |