| शीर्षक | D-Link DI-8100 DI-8100-16.07.26A1 Stack-based Buffer Overflow |
|---|
| विवरण | In the ctxz_asp function of the jhttpd file of the DI_8100-16.07.26A1 firmware, control the incoming def, defTcp, defUdp, defIcmp, and defO parameters, and then the incoming parameters after sprintf, such as v31, v34, v37, v40, will be copied to v47 again (local variables are on the stack) through the following judgment assignment. But without control, it results in stack overflow, which may lead to denial of service or even command execution. |
|---|
| स्रोत | ⚠️ https://github.com/Yhuanhuan01/DI-8100_Vulnerability_Report/blob/main/DI-8100-Vulnerability_Report_ctxz.md |
|---|
| उपयोगकर्ता | huan (UID 84420) |
|---|
| सबमिशन | 13/05/2025 02:00 PM (1 वर्ष पहले) |
|---|
| संयम | 17/05/2025 08:14 AM (4 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 309436 [D-Link DI-8100 16.07.26A1 Connection Limit Page /ctxz.asp ctxz_asp def/defTcp/defUdp/defIcmp/defOther बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|