CVE-2017-20227

CRITICAL

9.8

Beschreibung

JAD Java Decompiler 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying overly long input that exceeds buffer boundaries. Attackers can craft malicious input passed to the jad command to overflow the stack and execute a return-oriented programming chain that spawns a shell.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht3/28/2026

Zuletzt geandert3/30/2026

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-787

Referenzen

http://www.varaneckas.com/jad/(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/42255(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/jad-8e-1kali1-stack-based-buffer-overflow(disclosure@vulncheck.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.