CVE-2017-14948 in DIR-880Linfo

Zusammenfassung

von MITRE

Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code (remote). The component is: htdocs/fileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could allow an attacker to mount a ROP attack: if the HTTP header field CONTENT_TYPE starts with ''boundary=' followed by more than 256 characters, a buffer overflow would be triggered, potentially causing code execution.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservieren

29.09.2017

Moderieren

akzeptiert

Eintrag

VDB-143469

CPE

bereit

EPSS

0.03012

KEV

nein

Aktivitäten

very low

Quellen

Want to know what is going to be exploited?

We predict KEV entries!