The vulnerability of the GetCGI() function in the user interface of DrayTek Vigor networking device software allows a hacker to execute arbitrary code.

The vulnerability of the GetCGI function in the user interface of DrayTek Vigor networking devices lies in buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted HTTP request remotely...