| View previous topic :: View next topic |
| Author |
Message |
Wally
Joined: 26 Sep 2005
Posts: 672
|
|
| Back to top |
|
 |
afiser
Joined: 23 May 2007
Posts: 1
|
 Posted: Wed May 23, 2007 7:55 am Post subject: |
 |
|
libTTF is a font library
and the libPNG vulnerability doesn't seem to cause an overflow so i doubt it can be useful. |
|
| Back to top |
|
|
Greatmetal
Joined: 23 May 2007
Posts: 2
|
| Posted: Wed May 23, 2007 1:55 pm Post subject: |
|
|
| Last time I knew as a buffer overflow was a DOS type attack. Don't give up so easily asifer. |
|
| Back to top |
|
|
Greatmetal
Joined: 23 May 2007
Posts: 2
|
| Posted: Thu May 24, 2007 4:31 pm Post subject: |
|
|
| Why is no one giving their input on this? It needs to be looked at in case it is a usable exploit :/. |
|
| Back to top |
|
|
Raphael
Joined: 17 Jan 2006
Posts: 646
Location: Germany
|
| Posted: Thu May 24, 2007 6:38 pm Post subject: |
|
|
TTF will at most lead to an exploit in the browser and that will at most give user mode access. So that's not the best point to look for. The PNG exploit on the other side was labeled 'low risc', so I'm not sure if that will be useable at all.
_________________
<Don't push the river, it flows.>
http://wordpress.fx-world.org - my devblog
http://wiki.fx-world.org - VFPU documentation wiki
Alexander Berl |
|
| Back to top |
|
|
ufoz
Joined: 10 Nov 2005
Posts: 86
Location: Tokyo
|
| Posted: Thu May 24, 2007 7:22 pm Post subject: |
|
|
The PSP firmware uses its own proprietary font system, not TTF, so that one isn't even applicable.
Anyway, I thought we don't really discuss exploits here...? |
|
| Back to top |
|
|
Wally
Joined: 26 Sep 2005
Posts: 672
|
| Posted: Thu May 24, 2007 9:54 pm Post subject: |
|
|
| Raphael wrote: | | TTF will at most lead to an exploit in the browser and that will at most give user mode access. So that's not the best point to look for. The PNG exploit on the other side was labeled 'low risc', so I'm not sure if that will be useable at all. |
User mode can lead to full access though anyway (As seen in the past)
And it would keep those people on 3.10 - 3.40 happy where they can run Nes or something without the need of access to the kernel..
its just a new chapter :P |
|
| Back to top |
|
|
Raphael
Joined: 17 Jan 2006
Posts: 646
Location: Germany
|
| Posted: Fri May 25, 2007 12:22 am Post subject: |
|
|
| Wally4000 wrote: |
User mode can lead to full access though anyway (As seen in the past)
|
Not unless another exploit in the kernel functions is found. And THAT is the real problem about it, so I'd rather first investigate for such exploits. But I'm not the man for that anyway, so I don't care really.
_________________
<Don't push the river, it flows.>
http://wordpress.fx-world.org - my devblog
http://wiki.fx-world.org - VFPU documentation wiki
Alexander Berl |
|
| Back to top |
|
|
Wally
Joined: 26 Sep 2005
Posts: 672
|
| Posted: Fri May 25, 2007 12:45 am Post subject: |
|
|
Thats understandable.
I tried to sick skylark onto it, but hes lazy :P
Wally |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
