Exploitation Summary
EIP tracks 1 public exploit for CVE-2017-20227. PoCs published by Juan Sacco.
AI-analyzed exploit summary This exploit leverages a stack-based buffer overflow in JAD (Java Decompiler) 1.5.8e-1kali1 to achieve arbitrary code execution via a ROP chain. It constructs a payload that writes '/bin//sh' into memory and executes it using int 0x80.
Description
JAD Java Decompiler 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying overly long input that exceeds buffer boundaries. Attackers can craft malicious input passed to the jad command to overflow the stack and execute a return-oriented programming chain that spawns a shell.
Exploits (1)
This exploit leverages a stack-based buffer overflow in JAD (Java Decompiler) 1.5.8e-1kali1 to achieve arbitrary code execution via a ROP chain. It constructs a payload that writes '/bin//sh' into memory and executes it using int 0x80.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H