Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-37001. PoCs published by MasterVlad.
AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in Frigate Professional 3.36.0.9 via the 'Pack File' functionality, using an SEH egghunter and reverse shell payload to achieve remote code execution.
Description
Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the Pack File feature that allows attackers to execute arbitrary code by overflowing the 'Archive To' input field. Attackers can craft a malicious payload that overwrites the Structured Exception Handler (SEH) and uses an egghunter technique to execute a reverse shell payload.
Exploits (1)
This exploit leverages a buffer overflow vulnerability in Frigate Professional 3.36.0.9 via the 'Pack File' functionality, using an SEH egghunter and reverse shell payload to achieve remote code execution.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H