cve/2016/CVE-2016-2226.md

CVE-2016-2226

Description

Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.

POC

Reference

• https://www.exploit-db.com/exploits/42386/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/fokypoky/places-list
• https://github.com/mglantz/acs-image-cve
• https://github.com/mrash/afl-cve