| शीर्षक | UTT HiPER 1200GW <=v2.5.3-170306 Buffer Overflow |
|---|
| विवरण | A serious buffer overflow vulnerability has been identified in the UTT Aggressive HiPER 1200GW router. The vulnerable endpoint is /goform/formGroupConfig, where insufficient validation of user-supplied input can be exploited to trigger a stack-based buffer overflow.
By sending a specially crafted HTTP request to /goform/formGroupConfig with an excessively long value for a vulnerable parameter, an attacker can overflow a fixed-size buffer allocated on the stack. The root cause lies in the unsafe use of the strcpy function at the following code location: strcpy((char *)(InstPointByIndex_1 + 84), src_1);. Here, the destination buffer is offset 84 bytes into a stack-allocated structure referenced by InstPointByIndex_1, while the source string src_1 is populated directly from attacker-controlled input without any boundary checks. When the provided input exceeds the capacity of the destination buffer, the strcpy operation writes beyond the buffer boundary, corrupting adjacent stack memory, including critical data such as saved return addresses and frame pointers. |
|---|
| स्रोत | ⚠️ https://github.com/7wkajk/CVE-VUL/blob/main/105.md |
|---|
| उपयोगकर्ता | yecp (UID 95483) |
|---|
| सबमिशन | 02/07/2026 12:59 PM (2 महीनों पहले) |
|---|
| संयम | 18/08/2026 08:49 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 391919 [UTT HiPER 1200GW तक 2.5.3-170306 /goform/formGroupConfig strcpy timestart बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|