{"id":"CVE-2016-20039","state":"PUBLISHED","title":"Multi Emulator Super System 0.154-3.1 Buffer Overflow","description":"Multi Emulator Super System 0.154-3.1 contains a buffer overflow vulnerability in the gamma parameter handling that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized gamma parameter value to overflow the stack buffer and overwrite the instruction pointer with a controlled address to achieve code execution.","publishedAt":"2026-03-28T11:58:01.411Z","updatedAt":"2026-03-30T18:09:09.469Z","severity":{"score":8.6,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["mamedev Mess Emulator"],"affected":[{"vendor":"mamedev","product":"Mess Emulator","versions":[{"version":"0.154-3.1","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/39673","http://mamedev.org/","https://www.vulncheck.com/advisories/multi-emulator-super-system-buffer-overflow"],"weaknesses":["CWE-787"],"ingestedAt":"2026-10-29T19:42:36.310Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2016/20xxx/CVE-2016-20039.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2016-20039","state":"PUBLISHED","datePublished":"2026-03-28T11:58:01.411Z","dateUpdated":"2026-03-30T18:09:09.469Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-03-28T11:32:06.624Z"},"containers":{"cna":{"title":"Multi Emulator Super System 0.154-3.1 Buffer Overflow","descriptions":[{"lang":"en","value":"Multi Emulator Super System 0.154-3.1 contains a buffer overflow vulnerability in the gamma parameter handling that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized gamma parameter value to overflow the stack buffer and overwrite the instruction pointer with a controlled address to achieve code execution."}],"affected":[{"vendor":"mamedev","product":"Mess Emulator","versions":[{"version":"0.154-3.1","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/39673","name":"ExploitDB-39673","tags":["exploit"]},{"url":"http://mamedev.org/","name":"Official Product Homepage","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/multi-emulator-super-system-buffer-overflow","name":"VulnCheck Advisory: Multi Emulator Super System 0.154-3.1 Buffer Overflow","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.6,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","lang":"en","description":"Out-of-bounds Write","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-03-28T11:58:01.411Z"},"credits":[{"lang":"en","value":"Juan Sacco - http://www.exploitpack.com -","type":"finder"}],"x_generator":{"engine":"vulncheck"},"datePublic":"2016-04-07T00:00:00.000Z"},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-03-30T18:08:57.867067Z","id":"CVE-2016-20039","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-30T18:09:09.469Z"}}]}}}