CVE-2012-6048

Guitar Pro 6.1.1 r10791 - Denial of Service via Long String in GPX File

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-6048. PoCs published by condis.

AI-analyzed exploit summary This PoC exploits a buffer overflow vulnerability in Guitar Pro 6.1.1 r10791 by writing a malformed .gpx file, leading to a crash (DoS). The exploit uses a fixed pattern and a large number of 'A' characters to trigger the vulnerability.

Description

Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long string in a gpx file.

Exploits (1)

exploitdb WORKING POC
by condis · pythondoswindows
https://www.exploit-db.com/exploits/18851

This PoC exploits a buffer overflow vulnerability in Guitar Pro 6.1.1 r10791 by writing a malformed .gpx file, leading to a crash (DoS). The exploit uses a fixed pattern and a large number of 'A' characters to trigger the vulnerability.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Guitar Pro 6.1.1 r10791
No auth needed
Prerequisites: Ability to deliver a malformed .gpx file to the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/18851
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/81828

Scores

EPSS 0.0244
EPSS Percentile 82.2%

Details

CWE
CWE-119
Status published
Products (1)
guitar-pro/guitar_pro 6.1.1
Published Nov 27, 2012
Tracked Since Feb 18, 2026