제출 #807853: D-Link DI-8100 16.07.26A1 Denial of Service

A stack-based buffer overflow vulnerability exists in the web management interface of D-Link DI-8100 devices running firmware version 16.07.26A1.The vulnerability resides in the CGI handler responsible for processing the /user_group.asp endpoint (specifically within the function located at offset 0x0046ecec in the binary [email protected]). An authenticated attacker can overflow the buffer, corrupting the stack. This results in a Denial of Service (DoS) condition causing the HTTP service to crash.

• 원천: ⚠️ https://github.com/draw-ctf/report/blob/main/DI-8100/user_group_asp_overflow.md
• 사용자: draw (UID 64399)
• 제출: 2026. 04. 19. PM 04:51 (2 개월 ago)
• 모더레이션: 2026. 05. 05. PM 01:41 (16 days later)
• 상태: 수락
• VulDB 항목: 361134 [D-Link DI-8100 16.07.26A1 CGI /user_group.asp sprintf 메모리 손상]
• 포인트들: 20