Skip to content
Threat Feed
high advisory

Multi Emulator Super System (MESS) Buffer Overflow Vulnerability (CVE-2016-20039)

Multi Emulator Super System 0.154-3.1 is vulnerable to a buffer overflow (CVE-2016-20039) allowing local attackers to achieve arbitrary code execution by supplying a malicious gamma parameter, leading to potential system compromise.

Multi Emulator Super System (MESS) version 0.154-3.1 is susceptible to a buffer overflow vulnerability, identified as CVE-2016-20039. This flaw resides in the handling of the “gamma” parameter. A local attacker can exploit this vulnerability by providing an overly large value for the gamma parameter. Successful exploitation allows the attacker to overwrite the stack buffer, potentially leading to arbitrary code execution and complete system compromise. This vulnerability was reported in March…

Detection coverage 2

Detect Suspicious MESS Process Invocation

medium

Detects the invocation of the Multi Emulator Super System (MESS) process with potentially malicious command-line arguments related to gamma settings.

sigma tactics: execution techniques: T1202 sources: process_creation, windows

Detect Stack Overflow via Gamma Parameter

high

Detects a potential stack overflow attempt in Multi Emulator Super System by monitoring process crashes associated with manipulated gamma parameters.

sigma tactics: execution techniques: T1202 sources: application, windows

Detection queries are kept inside the platform. Get full rules →