A remote overflow exists in several D-Link Routers. These routers fail to handle some M-SEARCH UPnP requests resulting in a stack overflow. With a specially crafted UPnP request, an attacker can execute arbitrary code resulting in a loss of integrity.
Classification
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Rumored / Private
Solution
Vendor D-Link has released updates for all affected routers and they are available for download on their website.
eEye.com - eEye Digital Security