CVE-2016-20040: high-severity vulnerability in ticalc Texas Instrument Emulator
TiEmu 3.03-nogdb+dfsg-3 Buffer Overflow via ROM Parameter
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.6epss 0.2%
TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow vulnerability in the ROM parameter handling that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized ROM parameter to the tiemu command-line interface to overflow the stack buffer and overwrite the instruction pointer with malicious addresses.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
ticalc · Texas Instrument Emulatorpublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/39692unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.