| 标题 | D-Link DIR-816 A2 <= v1.10CNB05 Buffer Overflow |
|---|
| 描述 | The router D-Link DIR-816 A2 1.10B05 has a serious buffer overflow vulnerability, which can be exploited through the /goform/form2IPQoSTcDel route. The reason is that the strncpy(v23, v2, v9 - v8); function in the sub_46E230 function does not strictly check the length, which allows attackers to construct a reasonable payload to achieve buffer overflow or even crash the program. |
|---|
| 来源 | ⚠️ https://github.com/CH13hh/tmp_store_cc/blob/main/tt/4.md |
|---|
| 用户 | BabyShark (UID 83915) |
|---|
| 提交 | 2025-04-08 17時16分 (1 年前) |
|---|
| 管理 | 2025-04-18 04時26分 (9 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 240140 [D-Link DIR-816 A2 1.10CNB0 form2IPQoSTcDel removeRuleList 内存损坏] |
|---|
| 积分 | 0 |
|---|