CVE-2013-6343 – ASUS RT-N56U - Remote Buffer Overflow (ROP)

https://notcve.org/view.php?id=CVE-2013-6343

19 Jan 2014 — Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow remote attackers to execute arbitrary code via the (1) apps_name or (2) apps_flag parameter to APP_Installation.asp. Múltiples desbordamientos de búfer en web.c de httpd en routers ASUS RT-N56U y RT-AC66U con firmware 3.0.0.4.374_979 permite a atacantes remotos ejecutar código arbitrario a través de parámetros (1) apps_name o (2) apps_flag hacia APP_Installation.asp. • https://packetstorm.news/files/id/124855 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •