D-Link DIR-605L Wireless N300 Cloud Router contains an overflow condition in the CAPTCHA feature that is triggered as user-supplied input in the FILECODE value sent to /goform/formLogin is not properly validated. With a specially crafted HTTP POST request, a remote attacker can cause a stack-based buffer overflow, allowing the execution of arbitrary code.
Remote / Network Access
Loss of Integrity
OSVDB is not aware of a solution for this vulnerability.