D-Link DSL-3782 Buffer Overflow Vulnerability (CNVD-2021-94837)

D-Link DSL-3782 is a wireless router from D-Link (Taiwan, China).A buffer overflow vulnerability exists in the D-Link DSL-3782 EU v1.01 and EU v1.03 versions, which originates from the WEB interface /cgi-bin/New_GUI/Igmp.asp when executing operations on memory data boundary is not properly validated. An authenticated remote attacker can trigger the vulnerability by sending a long string in the parameter “igmpsnoopEnable” in an HTTP request, resulting in a denial-of-service attack.