Tenda F453 Buffer Overflow Vulnerability in SafeUrlFilter Function

A buffer overflow vulnerability has been identified in the Tenda F453 router, specifically in version 1.0.0.3. The issue arises in the 'fromSafeUrlFilter' function within the '/goform/SafeUrlFilter' file. The vulnerability can be exploited remotely by manipulating the 'page' argument, leading to potential denial-of-service conditions or arbitrary code execution.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to stack corruption. This type of memory corruption vulnerability is commonly exploited to execute arbitrary code.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/SafeUrlFilter' with an excessively long 'page' parameter. If the 'menufacturer' parameter is left empty, the lack of length validation allows the 'page' parameter to overflow a stack-based buffer.