| タイトル | DLink DIR-878 A1 FW104B05 CWE-120 Buffer Copy without Checking Size of Input ('Classic Buf |
|---|
| 説明 | During the firmware update process, in function sub_465A30 of program prog.cgi. A 16MB buffer is allocated to store the new firmware image for update. But, there is no no constraint or verification on the size of new firmware image. Once the size of new firmware image is greater than 16MB, buffer overflow occurs. This issue in the firmware update process of DLink DIR-878 A1 (firmware version: FW104B05) allows attackers to interrupt the firmware update process and make the firmware update fail. |
|---|
| ソース | ⚠️ https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Dlink/DIR878A1.md |
|---|
| ユーザー | IOT_Res (UID 81722) |
|---|
| 送信 | 2025年08月26日 14:44 (1 年 ago) |
|---|
| モデレーション | 2025年09月02日 15:06 (7 days later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 172386 [D-Link DIR-878 1.30B08 prog.cgi strcat メモリ破損] |
|---|
| ポイント | 0 |
|---|