Peanuts62

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 **Description** A stack buffer overflow issue exists in the function `FUN 80034d60` in the `/formStaticDHCP` endpoint. This issue can be triggered via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code in the system. **Recommendations** For D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410, consider disabling access to the `/formStaticDHCP` endpoint until a patch is available. As a temporary workaround, restrict the use of the `FUN 80034d60` function to minimize the risk of exploitation. Avoid using the `/formStaticDHCP` endpoint with crafted POST requests until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 **Description** A stack buffer overflow issue exists in the `FUN 80040af8` function, located in the `/formWlanSetup` endpoint. This issue can be triggered via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code in the system. **Recommendations** For D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410, as a temporary workaround, consider disabling the `FUN 80040af8` function in the `/formWlanSetup` endpoint until a patch is available. Restrict access to the `/formWlanSetup` endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-809 versions through DIR-809Ax FW1.12WWB03 20190410 **Description** The issue is related to a stack buffer overflow vulnerability in the function FUN 8004776c, located in the /formVirtualServ endpoint. This vulnerability can be triggered via a crafted POST request to the "/formVirtualServ" endpoint, allowing a remote attacker to execute arbitrary code in the system. **Recommendations** For versions through DIR-809Ax FW1.12WWB03 20190410, as a temporary workaround, consider disabling the FUN 8004776c function in the /formVirtualServ endpoint until a patch is available. Restrict access to the /formVirtualServ endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 **Description** The issue is related to a stack buffer overflow vulnerability in the function `FUN 80046eb4` in the `/formSetPortTr` endpoint. This vulnerability can be triggered via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code in the system. **Recommendations** For D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410, consider disabling the `FUN 80046eb4` function in the `/formSetPortTr` endpoint as a temporary workaround until a patch is available. Restrict access to the `/formSetPortTr` endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-809 versions through DIR-809Ax FW1.12WWB03 20190410 **Description** The issue is related to a stack buffer overflow vulnerability in the function `sub 8003183C` in the `/fromLogin` endpoint. This vulnerability can be triggered via a crafted POST request to the `/fromLogin` endpoint, potentially allowing a remote attacker to execute arbitrary code in the system. **Recommendations** For versions through DIR-809Ax FW1.12WWB03 20190410, as a temporary workaround, consider restricting access to the `/fromLogin` endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 **Description** A stack buffer overflow issue exists in the `FUN 8004776c` function, located in the `/formVirtualApp` endpoint. This issue can be triggered via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code in the system. **Recommendations** For D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410, as a temporary workaround, consider disabling the `FUN 8004776c` function in the `/formVirtualApp` endpoint until a patch is available. Restrict access to the `/formVirtualApp` endpoint to minimize the risk of exploitation. Avoid using crafted POST requests to the `/formVirtualApp` endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 **Description** A stack buffer overflow issue was found in the `sub 80046EB4` function in the `/formSetPortTr` endpoint. This issue can be triggered via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code in the system. **Recommendations** For D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410, consider disabling the `sub 80046EB4` function in the `/formSetPortTr` endpoint as a temporary workaround until a patch is available. Restrict access to the `/formSetPortTr` endpoint to minimize the risk of exploitation. Avoid using crafted POST requests to the `/formSetPortTr` endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 **Description** A stack buffer overflow issue exists in the `FUN 800462c4` function, located in the `/formAdvFirewall` endpoint. This issue can be triggered via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code in the system. **Recommendations** For D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410, as a temporary workaround, consider disabling the `FUN 800462c4` function in the `/formAdvFirewall` endpoint until a patch is available. Restrict access to the `/formAdvFirewall` endpoint to minimize the risk of exploitation. Avoid using the vulnerable function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libsixel version 1.8.6 **Description** The issue arises from unverified indexes into an array, leading to out of bound access in the `gif out code` function located in `fromgif.c` in libsixel. This can potentially cause issues due to the unauthorized access beyond the array's boundaries. **Recommendations** For libsixel version 1.8.6, consider restricting access to the `gif out code` function in `fromgif.c` until a patch is available. As a temporary workaround, avoid using the `gif out code` function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ImageMagick version 7.0.10-7 **Description** The issue is related to a stack-based buffer overflow and unconditional jump in the ReadXPMImage function in the coders/xpm.c component of ImageMagick. This allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. **Recommendations** For ImageMagick version 7.0.10-7, consider disabling the ReadXPMImage function in coders/xpm.c as a temporary workaround until a patch is available. Restrict access to the coders/xpm.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.