DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow.

OSDev Wiki


Our wiki and forums provide 200k+ posts and 725 articles about the creation of operating systems.

Highlights

  • It helps in understanding OS structure and developing.
Listed: