| Título | H3C R160 V1004004 was discovered to contain a stack overflow via go parameter at /goForm/aspForm |
|---|
| Descrição | - Product：H3C R160V smart wifi Router
- Manufactor：H3C
- product information：https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/Catalog/H3C_Magic_R/R160/
- firmware download：https://www.h3c.com/cn/d_202012/1361139_30005_0.htm
The program obtains content via the go parameter, which is then passed to v3 and copied into *goHtmlUrl* without checking the size of v3. As a result, a buffer overflow vulnerability exists.
|
|---|
| Fonte | ⚠️ https://github.com/xinzhihen06/dxq-cve/blob/main/h3cr160.md |
|---|
| Utilizador | dengxiquan (UID 45363) |
|---|
| Submissão | 26/04/2023 14h46 (há 3 anos) |
|---|
| Moderação | 12/05/2023 10h13 (16 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 228890 [H3C R160 V1004004 /goForm/aspForm go Excesso de tampão] |
|---|
| Pontos | 20 |
|---|