CVE-2018-25220 - Vulnerability Analysis

Overview

Bochs 2.6-5 contains a stack-based buffer overflow caused by oversized input string handling, letting attackers execute arbitrary code with application privileges, exploit requires crafted malicious input.

Severity & Score

Impact

Attackers can execute arbitrary code with application privileges, potentially leading to full system compromise.

Mitigation

Update to the latest version.

References

• https://www.exploit-db.com/exploits/43979
• https://www.vulncheck.com/advisories/bochs-5-buffer-overflow-remote-code-execution
• http://bochs.sourceforge.net/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner