CVE-2017-20225

Description

TiEmu 2.08 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting inadequate boundary checks on user-supplied input. Attackers can trigger the overflow through command-line arguments passed to the application, leveraging ROP gadgets to bypass protections and execute shellcode in the application context.

Weakness classification

• CWE-787: Out-of-bounds Write

Primary references

• disclosure@vulncheck.com — Product
• disclosure@vulncheck.com — Exploit, VDB Entry
• disclosure@vulncheck.com — Third Party Advisory