Description
Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature that allows attackers to execute arbitrary code by overflowing the computer name input field. Attackers can craft a malicious payload that triggers a buffer overflow, enabling code execution and launching calculator as a proof of concept.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WinFrigate | Frigate 3 Professional | 3.36.0.9 | — |
References
- ExploitDB-48579 exploit
- Archived Vendor Homepage product
- VulnCheck Advisory: Frigate Professional 3.36.0.9 - 'Find Computer' Local Buffer Overflow third-party-advisory