إرسال #792865: Tenda F451_kfw_V1.0.0.7_cn_svn7958 V1.0.0.7 Buffer Overflowالمعلومات

عنوانTenda F451_kfw_V1.0.0.7_cn_svn7958 V1.0.0.7 Buffer Overflow
الوصفWe found an overflow vulnerability in httpd : In WrlclientSet function,it reads in a user-provided parameter GO. And the variable s_1 will be passed to the sub_3A494 function without any length check, which may overflow the stack-based buffer s_ by sprintf. As a result, by requesting the page, an attacker can easily execute a denial of service attack or remote code execution.
المصدر⚠️ https://github.com/Jimi-Lab/cve/issues/12
المستخدم
 Jimi (UID 68862)
ارسال30/03/2026 03:29 PM (5 أشهر منذ)
الاعتدال11/04/2026 06:03 PM (12 days later)
الحالةتمت الموافقة
إدخال VulDB356984 [Tenda F451 1.0.0.7 httpd /goform/WrlclientSet GO تلف الذاكرة]
النقاط20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!