Skip to content
OpenAdvisories

Package · Debian

tuxguitar

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.5

    TuxGuitar: Arbitrary Code Execution via maliciously crafted `.tg` file

    TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path to reference an on-disk archive, including the .tg file itself, whose META-INF/services/javax.sound.midi.Soundbank entry names an attacker…