| Название | DLink DIR-878 A1 FW104B05 CWE-120 Buffer Copy without Checking Size of Input ('Classic Buf |
|---|
| Описание | During the firmware update process, in function sub_465A30 of program prog.cgi. A 16MB buffer is allocated to store the new firmware image for update. But, there is no no constraint or verification on the size of new firmware image. Once the size of new firmware image is greater than 16MB, buffer overflow occurs. This issue in the firmware update process of DLink DIR-878 A1 (firmware version: FW104B05) allows attackers to interrupt the firmware update process and make the firmware update fail. |
|---|
| Источник | ⚠️ https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Dlink/DIR878A1.md |
|---|
| Пользователь | IOT_Res (UID 81722) |
|---|
| Представление | 26.08.2025 14:44 (1 Год назад) |
|---|
| Модерация | 02.09.2025 15:06 (7 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 172386 [D-Link DIR-878 1.30B08 prog.cgi strcat повреждение памяти] |
|---|
| Баллы | 0 |
|---|