Exploitation Summary
EIP tracks 1 public exploit for CVE-2017-20226. PoCs published by Juan Sacco.
AI-analyzed exploit summary This exploit demonstrates a stack-based buffer overflow in Mapscrn (part of setfont) 2.0.3, leveraging a crafted buffer with NOP sleds and shellcode to achieve arbitrary code execution. The vulnerability arises from unsafe use of strcpy, leading to memory corruption and potential RCE.
Description
Mapscrn 2.0.3 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized input buffer. Attackers can craft a malicious buffer with junk data, return address, NOP instructions, and shellcode to overflow the stack and achieve code execution or denial of service.
Exploits (1)
This exploit demonstrates a stack-based buffer overflow in Mapscrn (part of setfont) 2.0.3, leveraging a crafted buffer with NOP sleds and shellcode to achieve arbitrary code execution. The vulnerability arises from unsafe use of strcpy, leading to memory corruption and potential RCE.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H