D-Link TFTP Transporting Mode Remote Buffer Overflow Vulnerability

D-Link TFTP Transporting Mode Remote Buffer Overflow Vulnerability

D-Link TFTP is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before storing it in a finite-sized buffer.

A remote attacker can exploit this issue to cause the application to crash, denying further service to legitimate users. Given the nature of this issue, the attacker may presumably be able to execute code.

D-Link TFTP 1.0 is vulnerable; other versions may also be affected.