CVE-2017-20226 Details
Description
Mapscrn 2.0.3 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized input buffer. Attackers can craft a malicious buffer with junk data, return address, NOP instructions, and shellcode to overflow the stack and achieve code execution or denial of service.
A stack-based buffer overflow vulnerability has been identified in Mapscrn version 2.0.3. This vulnerability allows local attackers to execute arbitrary code by providing an oversized input buffer. Exploitation involves crafting a malicious buffer filled with junk data, a return address, NOP instructions, and shellcode to overflow the stack, potentially leading to code execution or a denial-of-service condition.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Mar 28, 2026CISA-ADP
Assessed Mar 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| http://ccross.msk.su | [email protected] | Broken LinkVendor |
| https://www.exploit-db.com/exploits/42144 | [email protected] | Exploit |
| https://www.vulncheck.com/advisories/mapscrn-stack-based-buffer-overflow | [email protected] | AdvisoryExploit |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Mapscrn | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 28, 2026 | New CVE Received | [email protected] |