Skip to content
OpenAdvisories

Vendor

helge17

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.5

    TuxGuitar: Arbitrary Code Execution via maliciously crafted `.tg` file

    TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path to reference an on-disk archive, including the .tg file itself, whose META-INF/services/javax.sound.midi.Soundbank entry names an attacker…