D-Link DIR-619L Stack-Based Buffer Overflow Vulnerability

A critical stack-based buffer overflow vulnerability has been identified in the D-Link DIR-619L router, specifically in version 2.06B01. The issue arises in the 'formSetWizard1' function within the '/goform/formWlSiteSurvey' file. The vulnerability can be exploited remotely by manipulating the 'curTime' argument, leading to potential arbitrary code execution. This vulnerability affects products that are no longer supported by the manufacturer.

Impact

Exploitation of this vulnerability allows for a stack-based buffer overflow, which could be used to execute arbitrary code on the affected device.

Reproduction

To reproduce this vulnerability, send a request to the '/goform/formWlSiteSurvey' endpoint with a crafted 'curTime' argument that exceeds the buffer limit. This will trigger the stack-based buffer overflow condition.