D-Link DIR-513 Stack Buffer Overflow Vulnerability

A stack buffer overflow vulnerability has been identified in the D-Link DIR-513 router, specifically in version 1.10. The issue arises in the 'goform/formSchedule' endpoint, where the 'curTime' parameter can be manipulated to overflow the buffer, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability causes a stack buffer overflow, which can lead to arbitrary code execution.

Reproduction

The vulnerability can be reproduced by sending a POST request to the 'goform/formSchedule' endpoint. The request must include a 'curTime' parameter with a payload that exceeds the buffer size, causing a stack overflow. This can be done using a web application that allows for the manipulation of HTTP request parameters, such as Burp Suite or Postman.