CVE-2016-20040
HIGHTiEmu 3.03-nogdb+dfsg-3 Buffer Overflow via ROM Parameter
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2016-20040. PoCs published by Juan Sacco.
AI-analyzed exploit summary This exploit demonstrates a local buffer overflow in Texas Instruments Emulator (TiEmu) version 3.03-nogdb+dfsg-3, leveraging a crafted ROM file to trigger a segmentation fault and execute arbitrary shellcode.
Description
TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow vulnerability in the ROM parameter handling that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized ROM parameter to the tiemu command-line interface to overflow the stack buffer and overwrite the instruction pointer with malicious addresses.
Exploits (1)
This exploit demonstrates a local buffer overflow in Texas Instruments Emulator (TiEmu) version 3.03-nogdb+dfsg-3, leveraging a crafted ROM file to trigger a segmentation fault and execute arbitrary shellcode.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H