| शीर्षक | Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflow |
|---|
| विवरण | In the router's scheduleAdd function, ruleName is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the ruleName to execute arbitrary code.As you can see here, the input has not been checked. The parameter ruleName is directly copy to a local variable placed on the stack, which overrides the return address of the function, causing buffer overflow. |
|---|
| स्रोत | ⚠️ https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_23/23.md |
|---|
| उपयोगकर्ता | pjq123 (UID 86618) |
|---|
| सबमिशन | 10/08/2025 01:49 PM (11 महीनों पहले) |
|---|
| संयम | 22/08/2025 05:40 PM (12 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 321058 [Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 तक 1.2.07.001 /goform/scheduleAdd ruleName बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|