CVE-2016-20040 - Vulnerability Analysis

Overview

TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow caused by improper handling of the ROM parameter in the command-line interface, letting local attackers crash the application or execute arbitrary code by supplying an oversized ROM parameter.

Severity & Score

Impact

Local attackers can crash the application or execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version with the buffer overflow fix.

References

• https://www.exploit-db.com/exploits/39692
• https://www.vulncheck.com/advisories/tiemu-nogdb-dfsg-3-buffer-overflow-via-rom-parameter
• http://lpg.ticalc.org/prj_tiemu/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner