Description
Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the Pack File feature that allows attackers to execute arbitrary code by overflowing the 'Archive To' input field. Attackers can craft a malicious payload that overwrites the Structured Exception Handler (SEH) and uses an egghunter technique to execute a reverse shell payload.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Frigate3 | Frigate Professional | 3.36.0.9 | — |
References
- ExploitDB-48688 exploit
- Archived Vendor Homepage product
- VulnCheck Advisory: Frigate Professional 3.36.0.9 - 'Pack File' Buffer Overflow (SEH Egghunter) third-party-advisory