Gửi #858620: UTT HiPER 1200GW <=v2.5.3-170306 Buffer Overflow

A serious buffer overflow vulnerability has been discovered in the UTT Aggressive HiPER 1200GW router. The vulnerable endpoint is /goform/ConfigAdvideo, where insufficient bounds checking on user-supplied input can be exploited to trigger a stack-based buffer overflow.

By sending a specially crafted HTTP request to /goform/ConfigAdvideo with an overly long value for a targeted parameter, an attacker can overflow a fixed-size stack buffer. The root cause of the vulnerability is the unsafe invocation of strcpy at the following code location: strcpy((char *)(InstPointByIndex + 84), src_1);. Here, the destination buffer is located 84 bytes into a stack-resident structure referenced by InstPointByIndex, while the source string src_1 is populated directly from attacker-controlled input without any length validation. When the supplied input exceeds the allocated buffer space, the strcpy operation writes past the buffer boundary, corrupting adjacent stack memory—including critical control data such as saved return addresses and frame pointers.

• Nguồn: ⚠️ https://github.com/7wkajk/CVE-VUL/blob/main/103.md
• Người dùng: yecp (UID 95483)
• Đệ trình: 15/06/2026 11:44 (cách đây 2 các tháng)
• Kiểm duyệt: 04/08/2026 21:59 (2 months later)
• Trạng thái: được chấp nhận
• Mục VulDB: 385933 [UTT HiPER 1200GW đến v2.5.3-170306 /goform/ConfigAdvideo strcpy timestart tràn bộ đệm]
• điểm: 20