إرسال #774929: Tenda F453 v1.0.0.3 Stack-based Buffer Overflowالمعلومات

عنوانTenda F453 v1.0.0.3 Stack-based Buffer Overflow
الوصف A vulnerability was found in Tenda F453 v1.0.0.3. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter of the component httpd. The manipulation of the argument menufacturer and Go with an unknown input leads to a buffer overflow vulnerability.In fromSafeClientFilter function,it reads in a user-provided parameter menufacturer and Go.If the value of menufacturer is tenda,the variable p_s will be passed to the strcat function without any length check, which may overflow the stack-based buffer s.As a result, by requesting the page, an attacker can easily execute a denial of service attack or remote code execution.
المصدر⚠️ https://github.com/Litengzheng/vul_db/blob/main/F453/vul_86/README.md
المستخدم
 LtzHust (UID 95660)
ارسال08/03/2026 03:38 AM (7 أشهر منذ)
الاعتدال21/03/2026 05:57 PM (14 days later)
الحالةتمت الموافقة
إدخال VulDB352378 [Tenda F453 1.0.0.3 Parameters /goform/SafeClientFilter fromSafeClientFilter menufacturer/Go تلف الذاكرة]
النقاط20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!