Approved changes feed: RSS · Atom
cpe:2.3:a:creolabs:gravity:1.0:*:*:*:*:*:*:*part: a version: 1.0 update: *
| Vendor | Creolabs (db7964b2-4c97-5246-8e69-5b818104f27b) |
|---|---|
| Product | Gravity (31972181-fd36-51aa-a2e0-60897fb1f0fa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/marcobambini/gravity |
purl2cpe | 2026-06-01 10:12:11.132397 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-1000437 |
vulnerable | 2026-06-08 05:08:34.549496 |
Details available
Creolabs Gravity 1.0 contains a stack based buffer overflow in the operator_string_add function, resulting in remote code execution.
Published: 2018-01-02T23:00:00.000Z
Updated: 2024-08-05T22:00:41.183Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000173 |
vulnerable | 2026-06-08 05:08:34.218534 |
Details available
Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to a buffer, we can break out of the bounds checking of that buffer. When list.join is called on the data it will read past a buffer resulting in a Heap-Buffer-Overflow.
Published: 2017-11-17T03:00:00.000Z
Updated: 2024-09-16T23:05:33.273Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000172 |
vulnerable | 2026-06-08 05:08:34.218236 |
Details available
Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'sublexer' pointer has been freed. Line 542 of gravity_lexer.c. 'lexer' is being used to access a variable but 'lexer' has already been freed, creating a Heap Use-After-Free condition.
Published: 2017-11-17T03:00:00.000Z
Updated: 2024-09-16T20:17:10.822Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000075 |
vulnerable | 2026-06-08 05:08:33.787700 |
Details available
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:06.475Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000074 |
vulnerable | 2026-06-08 05:08:33.787414 |
Details available
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function.
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:06.679Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000073 |
vulnerable | 2026-06-08 05:08:33.787109 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000072 |
vulnerable | 2026-06-08 05:08:33.786741 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.