Exploitation Summary
EIP tracks 1 public exploit for CVE-2018-25251. PoCs published by Abdullah Alıç.
AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in Snes9K 0.0.9z via the 'Netplay --> Options' feature, specifically targeting the 'Socket Port Number' field. It uses a SEH-based overflow with a bind shell payload generated by msfvenom to achieve remote code execution on Windows XP SP3.
Description
Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception handler (SEH) overwrite. Attackers can craft a malicious payload and paste it into the Socket Port Number field via the Netplay Options menu to achieve code execution through SEH chain exploitation.
Exploits (1)
This exploit leverages a buffer overflow vulnerability in Snes9K 0.0.9z via the 'Netplay --> Options' feature, specifically targeting the 'Socket Port Number' field. It uses a SEH-based overflow with a bind shell payload generated by msfvenom to achieve remote code execution on Windows XP SP3.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H