D-Link DIR-605L Buffer Overflow Vulnerability in WAN Wizard Function

A critical buffer overflow vulnerability has been identified in the D-Link DIR-605L router, specifically in version 2.13B01. The issue arises within the 'formSetWAN_Wizard534' function, where the 'curTime' argument is manipulated, leading to a buffer overflow. This vulnerability can be exploited remotely and affects a product that is no longer supported by the vendor.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the 'formSetWAN_Wizard534' function, manipulating the 'curTime' argument in a way that exceeds the buffer capacity, thereby causing a buffer overflow.