제출 #807798: D-Link DI-8100 16.07.26A1 Denial of Service
| 제목 | D-Link DI-8100 16.07.26A1 Denial of Service |
|---|---|
| 설명 | The yyxz.asp endpoint contains an insecure call to the sprintf function. When processing the user-supplied id parameter, the application fails to perform any length validation or input sanitization. It concatenates the user-controlled string with a fixed prefix and writes the result into a small stack buffer, leading to a classic buffer overflow condition. |
| 원천 | ⚠️ https:/ |
| 사용자 | draw (UID 64399) |
| 제출 | 2026. 04. 19. AM 10:50 (2 개월 ago) |
| 모더레이션 | 2026. 05. 05. PM 01:17 (16 days later) |
| 상태 | 수락 |
| VulDB 항목 | 361128 [D-Link DI-8100 16.07.26A1 yyxz.asp sprintf 아이디 메모리 손상] |
| 포인트들 | 18 |