| 标题 | D-Link DIR-513 1.10 Buffer Overflow |
|---|
| 描述 | D-Link DIR-513 is a network router manufactured by D-Link. A stack-based buffer overflow vulnerability exists in the Web service of the D-Link DIR-513 when processing form requests.
Within the formEasySetPassword function, the program retrieves the user-controllable curTime parameter via websGetVar without any length validation. When the language parameter is neither "SC" nor "TW", the program calls the unbounded sprintf function to concatenate the oversized curTime string into a fixed-size (104 bytes) stack buffer v11. An attacker can send a specially crafted HTTP POST request to trigger a stack overflow, overwriting the return address (located 172 bytes away). This can lead to a Denial of Service (DoS) or Remote Code Execution (RCE). |
|---|
| 来源 | ⚠️ https://github.com/InfiniteLin/Lin-s-CVEdb/tree/main/DIR-513/formEasySetPassword |
|---|
| 用户 | AttackingLin (UID 88138) |
|---|
| 提交 | 2026-03-06 04時02分 (7 月前) |
|---|
| 管理 | 2026-03-20 09時18分 (14 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 352009 [D-Link DIR-513 1.10 Web Service formEasySetPassword curTime 内存损坏] |
|---|
| 积分 | 20 |
|---|