CVE-2017-20226

HIGH

Mapscrn 2.0.3 Stack-Based Buffer Overflow

Title source: cna
STIX 2.1

Description

Mapscrn 2.0.3 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized input buffer. Attackers can craft a malicious buffer with junk data, return address, NOP instructions, and shellcode to overflow the stack and achieve code execution or denial of service.

Exploits (1)

exploitdb WORKING POC
by Juan Sacco · pythondoslinux
https://www.exploit-db.com/exploits/42144

Scores

CVSS v3 8.4
EPSS 0.0002
EPSS Percentile 4.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (1)
msk/Mapscrn 2.03
Published Mar 28, 2026
Tracked Since Mar 29, 2026