Description
Frigate 3.36.0.9 contains a local buffer overflow vulnerability in the Command Line input field that allows attackers to execute arbitrary code. Attackers can craft a malicious payload to overflow the buffer, bypass DEP, and execute commands like launching calc.exe through a specially crafted input sequence.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WinFrigate | Frigate 3 Professional | <= 3.36.0.9 | — |
References
- ExploitDB-48563 exploit
- Archived Vendor Homepage product
- VulnCheck Advisory: Frigate 3.36.0.9 - 'Command Line' Local Buffer Overflow third-party-advisory