Buffer Overflow Vulnerability in ACME Micro_httpd Affecting D-Link and NetGear Routers

CVE-2014-4927

Summary

A buffer overflow vulnerability exists in the ACME micro_httpd server component utilized in several D-Link and NetGear router models. This flaw allows a remote attacker to send a specially crafted long string in the URI of a GET request, which can lead to a denial of service condition by crashing the affected router. Products specifically impacted include the D-Link DSL2750U, DSL2740U, and NetGear models WGR614 and MR-ADSL-DG834, necessitating immediate attention for securing network devices against potential exploitation.

References