Description
Port Forwarding Wizard 4.8.0 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code through a long request in the Register feature. Attackers can craft a malicious payload with an egg tag and overwrite SEH handlers to potentially execute shellcode on vulnerable Windows systems.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| iForwarder and upRedSun Technologies, LLC. | Port Forwarding Wizard | 4.8.0 | — |
References
- ExploitDB-48695 exploit
- Vendor Homepage product
- VulnCheck Advisory: Port Forwarding Wizard 4.8.0 - Buffer Overflow third-party-advisory