CVE-2020-37049
HIGHFrigate 3 Professional 3.36.0.9 - Local Buffer Overflow via Command Line Input
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37049. PoCs published by Paras Bhatia.
AI-analyzed exploit summary This exploit demonstrates a local buffer overflow in Frigate 3.36.0.9 via the 'Command Line' feature, leveraging SEH overwrite to execute arbitrary code (calc.exe). The payload is generated using msfvenom and includes NOP sleds and shellcode.
Description
Frigate 3.36.0.9 contains a local buffer overflow vulnerability in the Command Line input field that allows attackers to execute arbitrary code. Attackers can craft a malicious payload to overflow the buffer, bypass DEP, and execute commands like launching calc.exe through a specially crafted input sequence.
Exploits (1)
This exploit demonstrates a local buffer overflow in Frigate 3.36.0.9 via the 'Command Line' feature, leveraging SEH overwrite to execute arbitrary code (calc.exe). The payload is generated using msfvenom and includes NOP sleds and shellcode.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H