D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://www.dlink.com/en/security-bulletin/ | vendor advisory |
https://github.com/1160300418/Vuls/blob/main/D-Link/DSL-3782/BOF_in_D-Link%20DSL-3782.md | third party advisory exploit |