| 제목 | D-Link DIR-513 1.10 Buffer Overflow |
|---|
| 설명 | D-Link DIR-513 is a network router manufactured by D-Link. A stack-based buffer overflow vulnerability exists in the Web service of the D-Link DIR-513 when processing form requests.
Within the formEasySetPassword function, the program retrieves the user-controllable curTime parameter via websGetVar without any length validation. When the language parameter is neither "SC" nor "TW", the program calls the unbounded sprintf function to concatenate the oversized curTime string into a fixed-size (104 bytes) stack buffer v11. An attacker can send a specially crafted HTTP POST request to trigger a stack overflow, overwriting the return address (located 172 bytes away). This can lead to a Denial of Service (DoS) or Remote Code Execution (RCE). |
|---|
| 원천 | ⚠️ https://github.com/InfiniteLin/Lin-s-CVEdb/tree/main/DIR-513/formEasySetPassword |
|---|
| 사용자 | AttackingLin (UID 88138) |
|---|
| 제출 | 2026. 03. 06. AM 04:02 (6 개월 ago) |
|---|
| 모더레이션 | 2026. 03. 20. AM 09:18 (14 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 352009 [D-Link DIR-513 1.10 Web Service formEasySetPassword curTime 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|