D-Link DIR-513 Stack Buffer Overflow Vulnerability

A stack buffer overflow vulnerability has been identified in the D-Link DIR-513 router, specifically in version 1.10. The issue arises in the goform/formAdvFirewall component, where an overly long payload sent via POST can cause the buffer overflow.

Impact

Exploitation of this vulnerability leads to a stack buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

To reproduce this vulnerability, send a POST request to the /goform/formAdvFirewall endpoint. Include a payload that exceeds the buffer length, such as a string of repeated characters. The request should be made with a Content-Type of application/x-www-form-urlencoded.