A buffer overflow vulnerability in the MESS emulator version 0.154-3.1 allows a local attacker to achieve arbitrary code execution by supplying an oversized input value.

This is an out-of-bounds write vulnerability (CWE-787) triggered by improper validation of the gamma command line parameter. An unauthenticated local attacker can provide an excessively long input string to overflow the stack buffer and overwrite the instruction pointer, leading to arbitrary code execution.

The vulnerability carries a CVSS score of 8.4, reflecting a high risk of total system compromise for the affected host. Successful exploitation grants an attacker the ability to execute code with the privileges of the user running the emulator, which could lead to unauthorized data access, privilege escalation, or complete loss of system integrity.

Immediate Action: Users should discontinue the use of version 0.154-3.1 and update to a patched version if available from the vendor, or remove the software from the environment.

Proactive Monitoring: Security teams should monitor process execution logs for anomalous command line arguments or unexpected crashes of the MESS emulator binary.

Compensating Controls: Restrict execution permissions for the MESS binary to only necessary users and ensure that the host environment is hardened against local exploitation attempts.

Public Exploit Available: Yes, a functional exploit exists as documented in the Exploit-DB entry 39673.

Given the availability of a public exploit and the potential for arbitrary code execution, this vulnerability poses a significant risk to local systems. Administrators must prioritize the removal or patching of the affected MESS emulator version to prevent potential exploitation by local users.