CVE-2017-20228 - Vulnerability Analysis

Overview

Flat Assembler 1.71.21 contains a stack-based buffer overflow caused by oversized input exceeding 5895 bytes, letting local attackers execute arbitrary code via return-oriented programming chains, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code, potentially gaining full control of the affected system.

Mitigation

Update to the latest version of Flat Assembler.

References

• http://www.flatassembler.net
• https://www.exploit-db.com/exploits/42265
• https://www.vulncheck.com/advisories/flat-assembler-stack-based-buffer-overflow-rop

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner