| शीर्षक | UTT HiPER 1200GW <=v2.5.3-170306 Buffer Overflow |
|---|
| विवरण | A serious buffer overflow vulnerability has been identified in the UTT Aggressive HiPER 1200GW router. The issue resides in the /goform/formTaskEdit endpoint, where insufficient bounds checking on user-supplied input allows an attacker to trigger a stack-based buffer overflow.
By sending a specially crafted HTTP request to /goform/formTaskEdit with an oversized parameter value, the attacker can overflow a fixed-size buffer located on the stack. The root cause lies in the insecure use of the strcpy function at the following code location: strcpy(InstPointByIndex + 20, src);. The destination buffer, InstPointByIndex, is of a fixed length, but the source data (src) is directly copied from user-controlled input without any length validation. When the input exceeds the buffer's capacity, data beyond the buffer boundary is overwritten, corrupting adjacent stack memory. |
|---|
| स्रोत | ⚠️ https://github.com/yuezhaoshanmu/cve/blob/main/1.md |
|---|
| उपयोगकर्ता | Missa (UID 98182) |
|---|
| सबमिशन | 12/05/2026 06:10 AM (23 दिन पहले) |
|---|
| संयम | 31/05/2026 07:47 PM (20 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 367585 [UTT HiPER 1200GW तक 2.5.3-170306 /goform/formTaskEdit strcpy बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|