D-Link DIR-513 Stack Buffer Overflow Vulnerability via Device Reboot Form

A stack buffer overflow vulnerability has been identified in the D-Link DIR-513 router, specifically in version 1.10. The issue arises in the 'goform/formDeviceReboot' function, where the value of 'next_page' is not properly validated before being copied to 'p_last_url'. This lack of validation can be exploited to overwrite memory, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability causes a stack buffer overflow, which can lead to arbitrary code execution.

Reproduction

To reproduce this vulnerability, send a POST request to '/goform/formDeviceReboot' with a crafted 'next_page' parameter. The value of 'next_page' should be sufficiently long to overflow the buffer when it is copied to 'p_last_url' using 'strcpy'.