D-Link DI-8100 Stack-Based Buffer Overflow Vulnerability in HTTP Request Handler

A critical stack-based buffer overflow vulnerability has been identified in the D-Link DI-8100 router, specifically in the HTTP Request Handler component while processing the '/arp_sys.asp' file. This vulnerability, present in firmware version 16.07.26A1, can be exploited remotely by sending specially crafted HTTP requests, potentially leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can disrupt the normal operation of the device and potentially allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by sending HTTP requests that exploit the buffer overflow condition in the '/arp_sys.asp' file. This can be done by targeting the D-Link DI-8100 router running firmware version 16.07.26A1.