CVE-2017-20227 - Vulnerability Analysis

Overview

JAD Java Decompiler <= 1.5.8e-1kali1 contains a stack-based buffer overflow caused by overly long input exceeding buffer boundaries, letting attackers execute arbitrary code remotely, exploit requires crafted malicious input.

Severity & Score

Impact

Attackers can execute arbitrary code remotely, potentially gaining full control of the affected system.

Mitigation

Update to the latest version of JAD Java Decompiler.

References

• http://www.varaneckas.com/jad/
• https://www.exploit-db.com/exploits/42255
• https://www.vulncheck.com/advisories/jad-8e-1kali1-stack-based-buffer-overflow

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner