PT-2026-28233 · Varaneckas · Jad Java Decompiler

CVE-2017-20227 · Publicado 2026-03-28 · Atualizado 2026-03-28

NVD

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

JAD Java Decompiler 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying overly long input that exceeds buffer boundaries. Attackers can craft malicious input passed to the jad command to overflow the stack and execute a return-oriented programming chain that spawns a shell.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2017-20227

Produtos afetados

Jad Java Decompiler

Referências · 4

• 🔥 https://exploit-db.com/exploits/42255 · Exploit
• https://vulncheck.com/advisories/jad-8e-1kali1-stack-based-buffer-overflow · Nota
• http://varaneckas.com/jad · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-20227 · Nota de Segurança