Snes9K Buffer Overflow Vulnerability Allowing Code Execution via Netplay Socket Port

A buffer overflow vulnerability has been identified in Snes9K version 0.0.9z, specifically within the Netplay Socket Port Number field. This vulnerability allows local attackers to overwrite the structured exception handler (SEH), potentially leading to code execution. Exploitation involves crafting a malicious payload, which can be pasted into the Socket Port Number field through the Netplay Options menu.

Impact

Exploitation of this vulnerability allows for a buffer overflow that overwrites the structured exception handler, leading to arbitrary code execution.

Reproduction

To reproduce this vulnerability, open Snes9K version 0.0.9z and navigate to the Netplay Options menu. Paste the crafted payload into the Socket Port Number field. Once the payload is inserted, connect to the victim machine on port 4444.