D-Link DI-8200 Buffer Overflow Vulnerability in yyxz_dlink_asp Function

A buffer overflow vulnerability has been identified in the D-Link DI-8200 router, specifically in version 16.07.26A1. The issue arises in the yyxz_dlink_asp function, where the id parameter can be manipulated to overflow the buffer.

Impact

Exploitation of this vulnerability leads to a stack overflow, causing the device to crash and become unresponsive.

Reproduction

The vulnerability can be reproduced by sending a request to the router's yyxz_dlink_asp function with an excessively long value in the id parameter. This overloads the buffer, causing a stack overflow that crashes the device.