CVE-2018-25220 | BDVDB-2026-323536 Detail

Description#

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwrite the instruction pointer and execute shell commands with application privileges.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-03-28Record published in the CVE List.
2. Version 22026-03-30Most recent update recorded in the CVE List.