Snes9K 0.0.9z Netplay Socket 缓冲区溢出 SEH

CVE-2018-25251 影响 Snes9K 0.0.9z 版本，构成重大的安全风险。它允许本地攻击者利用“Netplay Socket Port Number”字段中的缓冲区溢出漏洞。通过在 Netplay 选项菜单中向该字段注入恶意有效载荷，攻击者可以覆盖结构化异常处理程序 (SEH)，从而可能导致系统上执行任意代码。该漏洞的严重程度根据 CVSS 评分为 8.4，表明风险级别很高。成功利用可能使攻击者控制受影响的系统，从而损害数据的机密性、完整性和可用性。

Users who rely on Snes9K emulator for playing SNES games, particularly those running older versions (0.0.9z) and those who allow untrusted users access to their systems. Individuals using Snes9K in virtualized environments or as part of a larger software stack are also at risk, as a successful exploit could potentially compromise the entire system.

• linux / server: Monitor system logs (e.g., journalctl) for Snes9K processes crashing or exhibiting unusual behavior. Look for patterns related to memory access violations or SEH exceptions.

journalctl -u snes9k --grep='SEH' --grep='memory access'

• windows / supply-chain: Use Process Monitor (ProcMon) to observe file system and registry activity related to Snes9K. Look for suspicious writes to memory regions or modifications to the SEH chain. • generic web: While less applicable, monitor network traffic for unusual connections or data transfers originating from Snes9K processes.

1. 2026-04-04Disclosure

   disclosure

1. 已保留2026-04-04
2. 发布日期2026-04-04
3. 修改日期2026-04-06
4. EPSS 更新日期2026-04-12

针对 CVE-2018-25251 的主要缓解措施是更新到 Snes9K 的补丁版本。不幸的是，尚未发布 0.0.9z 版本的官方补丁。作为替代方案，建议避免使用 0.0.9z 版本，尤其是在安全至关重要的环境中。如果必须使用 Snes9K，请考虑使用经过审核和修补的最新版本。此外，限制对系统的物理访问并限制对 Netplay 选项菜单的访问可以帮助降低利用风险。监控系统是否存在可疑活动也是一种良好的安全实践。