| 标题 | DLink DIR-878 A1 FW104B05 CWE-120 Buffer Copy without Checking Size of Input ('Classic Buf |
|---|
| 描述 | During the firmware update process, in function sub_465A30 of program prog.cgi. A 16MB buffer is allocated to store the new firmware image for update. But, there is no no constraint or verification on the size of new firmware image. Once the size of new firmware image is greater than 16MB, buffer overflow occurs. This issue in the firmware update process of DLink DIR-878 A1 (firmware version: FW104B05) allows attackers to interrupt the firmware update process and make the firmware update fail. |
|---|
| 来源 | ⚠️ https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Dlink/DIR878A1.md |
|---|
| 用户 | IOT_Res (UID 81722) |
|---|
| 提交 | 2025-08-26 14時44分 (1 年前) |
|---|
| 管理 | 2025-09-02 15時06分 (7 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 172386 [D-Link DIR-878 1.30B08 prog.cgi strcat 内存损坏] |
|---|
| 积分 | 0 |
|---|