CVE-2017-1000072

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravity_value resulting potentially leading to modification of unexpected memory locations

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Jul 17, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-10000739.8Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution.CVE-2017-10000749.8Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function.CVE-2017-10000759.8Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp functionCVE-2017-10000786.1Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registrationCVE-2017-10000797.5Linux foundation ONOS 1.9.0 is vulnerable to a DoS.CVE-2017-10000807.5Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets.CVE-2017-10000819.8Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code execution.CVE-2017-10000829.8systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the service in question with rCVE-2017-10000837.8backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary comCVE-2017-10000846.5Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication iCVE-2017-10000856.5Subversion Plugin connects to a user-specified Subversion repository as part of form validation (e.g. to retrieve a list of tags). This funcCVE-2017-10000868.0The Periodic Backup Plugin did not perform any permission checks, allowing any user with Overall/Read access to change its settings, trigger
CVE-2017-1000072: Critical severity, CVSS 9.8 | Vulnix