| عنوان | DLink DIR-878 A1 FW104B05 CWE-120 Buffer Copy without Checking Size of Input ('Classic Buf |
|---|
| الوصف | During the firmware update process, in function sub_465A30 of program prog.cgi. A 16MB buffer is allocated to store the new firmware image for update. But, there is no no constraint or verification on the size of new firmware image. Once the size of new firmware image is greater than 16MB, buffer overflow occurs. This issue in the firmware update process of DLink DIR-878 A1 (firmware version: FW104B05) allows attackers to interrupt the firmware update process and make the firmware update fail. |
|---|
| المصدر | ⚠️ https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Dlink/DIR878A1.md |
|---|
| المستخدم | IOT_Res (UID 81722) |
|---|
| ارسال | 26/08/2025 02:44 PM (1 سنة منذ) |
|---|
| الاعتدال | 02/09/2025 03:06 PM (7 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 172386 [D-Link DIR-878 1.30B08 prog.cgi strcat تلف الذاكرة] |
|---|
| النقاط | 0 |
|---|