Stack Overflow Vulnerability in D-Link DCS-1100 and DCS-1130 Devices

CVE-2017-8410

What is CVE-2017-8410?

A vulnerability exists in D-Link DCS-1100 and DCS-1130 devices due to improper memory handling in the rtspd binary. Specifically, the memcpy operation in the rtsp header processing does not properly limit the amount of data copied, leading to a buffer overflow on the stack. This overflow corrupts the caller's registers and facilitates arbitrary code execution on the device. This vulnerability is exacerbated by a subsequent copy operation which further compromises memory integrity, making these devices susceptible to remote exploitation.

References