D-Link DIR-619L Buffer Overflow Vulnerability in formSetWizard2 Function

A critical buffer overflow vulnerability has been identified in the D-Link DIR-619L router, specifically in version 2.04B04. The issue arises in the formSetWizard2 function, where improper handling of the curTime argument creates a buffer overflow condition. This vulnerability can be exploited remotely and affects devices that are no longer supported by the vendor.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the DIR-619L router's formSetWizard2 function, including a payload that exceeds the buffer size allocated for the curTime argument. This can be done remotely, taking advantage of the router's web interface.