| عنوان | TRENDnet TEW-432BRP 3.10B20 Stack-based Buffer Overflow |
|---|
| الوصف | In formTcpipSetup function, name is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the name to execute arbitrary code.As you can see here, the input has not been checked. The parameter is directly copy to a local variable placed on the stack, which overrides the return address of the function, causing buffer overflow. |
|---|
| المصدر | ⚠️ https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_21/21.md |
|---|
| المستخدم | pjqwudi (UID 85106) |
|---|
| ارسال | 15/09/2026 05:33 AM (1 شهر منذ) |
|---|
| الاعتدال | 12/10/2026 02:00 PM (27 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 416890 [TRENDnet TEW-432BRP 3.10B20 /goform/formTcpipSetup name تلف الذاكرة] |
|---|
| النقاط | 20 |
|---|