CVE-2008-1266

CVE-2008-1266 describes multiple buffer overflow vulnerabilities in the web interface of the D-Link DI-524 router. These flaws, triggered by a long username or a large HTTP header name with an empty value, can lead to a denial of service (device crash) and potentially other unspecified impacts. With a CVSS score of 7.8, this vulnerability is considered highly severe due to its network-based attack vector and low attack complexity, requiring no authentication. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.