Craig has reported a vulnerability in D-Link Wireless N300 Cloud Router, which can be exploited by malicious people to compromise a vulnerable device.

The vulnerability is caused due to an error in the web server when processing CAPTCHA data and can be exploited to cause a stack-based buffer overflow via a specially crafted HTTP POST request.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in firmware version 1.10 and 1.12. Other versions may also be affected.

Solution
No official solution is currently available.

Provided and/or discovered by
Craig, /dev/ttyS0

Original Advisory
http://www.devttys0.com/2012/10/exploiting-a-mips-stack-overflow/

Deep Links
Links available to Secunia VIM customers