DIR-505 and DIR-505L Stack Buffer Overflow Vulnerability
BID:67651
Info
DIR-505 and DIR-505L Stack Buffer Overflow Vulnerability
| Bugtraq ID: | 67651 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2014-3936 |
| Remote: | Yes |
| Local: | No |
| Published: | May 15 2014 12:00AM |
| Updated: | Jul 21 2014 01:00AM |
| Credit: | Craig |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
DIR-505 and DIR-505L Stack Buffer Overflow Vulnerability
DIR-505 and DIR-505L are prone to a stack-based buffer-overflow vulnerability because they fail to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.
Successful exploits may allow an attacker to execute arbitrary code in the context of affected device. Failed attempts will likely cause a denial-of-service condition.
DIR-505 and DIR-505L are prone to a stack-based buffer-overflow vulnerability because they fail to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.
Successful exploits may allow an attacker to execute arbitrary code in the context of affected device. Failed attempts will likely cause a denial-of-service condition.
Exploit / POC
DIR-505 and DIR-505L Stack Buffer Overflow Vulnerability
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
Solution / Fix
DIR-505 and DIR-505L Stack Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
DIR-505 and DIR-505L Stack Buffer Overflow Vulnerability
References:
References: