D-Link DIR-513 Stack Buffer Overflow Vulnerability

A stack buffer overflow vulnerability has been identified in the D-Link DIR-513 router, specifically in version 1.10. The issue arises in the goform/formSetWizard2 component, where the curTime parameter can be manipulated to cause the overflow.

Impact

Exploitation of this vulnerability leads to a stack buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

To reproduce this vulnerability, send a POST request to the goform/formSetWizard2 endpoint. Include a payload in the curTime parameter that is excessively long, exceeding the buffer's capacity. This can be done using a standard web application testing tool or script that allows for the manipulation of HTTP request parameters.