| 제목 | DLink DIR-878 A1 FW104B05 CWE-120 Buffer Copy without Checking Size of Input ('Classic Buf |
|---|
| 설명 | During the firmware update process, in function sub_465A30 of program prog.cgi. A 16MB buffer is allocated to store the new firmware image for update. But, there is no no constraint or verification on the size of new firmware image. Once the size of new firmware image is greater than 16MB, buffer overflow occurs. This issue in the firmware update process of DLink DIR-878 A1 (firmware version: FW104B05) allows attackers to interrupt the firmware update process and make the firmware update fail. |
|---|
| 원천 | ⚠️ https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Dlink/DIR878A1.md |
|---|
| 사용자 | IOT_Res (UID 81722) |
|---|
| 제출 | 2025. 08. 26. PM 02:44 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 09. 02. PM 03:06 (7 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 172386 [D-Link DIR-878 1.30B08 prog.cgi strcat 메모리 손상] |
|---|
| 포인트들 | 0 |
|---|