Bugtraq mailing list archives

Buffer Overflow in My Wifi Router Software


From: sudson08 () gmail com
Date: Sat, 13 Jun 2015 14:14:58 GMT

Hi there,

I have seen a buffer overflow in My Wifi Router software version 1.0

The link of the software is available :- http://mywifirouter.software.informer.com/1.0/

Exploit :-  After running the software you will see two places to enter details i.e "Hotspot Name" and "Password".

To exploit this issue you have to enter Hotspot name more than 30 characters. which will force the OS exception handler 
to kick in and close the software. 

I have analyzed this issue via immunity debugger and found that EDI Register gets overwritten with A's which can be 
further used for exploitation

Thanks and Regards,
Sudhakar Dwivedi


Current thread: