Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-37042. PoCs published by Paras Bhatia.
AI-analyzed exploit summary This exploit demonstrates a local buffer overflow in Frigate Professional 3.36.0.9 via the 'Find Computer' feature, leveraging SEH overwrite to execute arbitrary code (calc.exe). The payload is generated using msfvenom and includes NOP sleds and shellcode.
Description
Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature that allows attackers to execute arbitrary code by overflowing the computer name input field. Attackers can craft a malicious payload that triggers a buffer overflow, enabling code execution and launching calculator as a proof of concept.
Exploits (1)
This exploit demonstrates a local buffer overflow in Frigate Professional 3.36.0.9 via the 'Find Computer' feature, leveraging SEH overwrite to execute arbitrary code (calc.exe). The payload is generated using msfvenom and includes NOP sleds and shellcode.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H