kando
August 22nd, 2006, 04:50
From the Developers Dungeon, page 32...
Fanjita:
Alright, time for a brief update with the facts so far.
This exploit is definitely genuine, and usable.
It's unclear exactly which firmwares it will be usable on, but so far 2.0 and 2.01 should definitely work. 2.5 and above are significantly harder to research. 2.7+ will take longer still. The signs are that it may go up as far as 2.8, but that's not proven.
Just to put things into perspective, a combined team has spent at least 60 intensive hours working on researching this so far, and we're at the point of being able to confirm that it will work.
It will take longer still to convert it into something that is actually in a demonstrable form, such as Hello World.
Credit so far goes to NOPx86 for discovering the vulnerability and proof of concept on the PC, and Skylark and psp250 for researching it on the PSP. I've helped a bit too, but those guys have done the bulk of the work.
http://forums.qj.net/f-developers-dungeon-47/t-libtiff-vulnerability-crashs-271-and-280-65799/page32.html
first ta-082 success and now this....woot!
of course neither of them are finished or released yet, but the proof of concept will go far very quickly :D
Fanjita:
Alright, time for a brief update with the facts so far.
This exploit is definitely genuine, and usable.
It's unclear exactly which firmwares it will be usable on, but so far 2.0 and 2.01 should definitely work. 2.5 and above are significantly harder to research. 2.7+ will take longer still. The signs are that it may go up as far as 2.8, but that's not proven.
Just to put things into perspective, a combined team has spent at least 60 intensive hours working on researching this so far, and we're at the point of being able to confirm that it will work.
It will take longer still to convert it into something that is actually in a demonstrable form, such as Hello World.
Credit so far goes to NOPx86 for discovering the vulnerability and proof of concept on the PC, and Skylark and psp250 for researching it on the PSP. I've helped a bit too, but those guys have done the bulk of the work.
http://forums.qj.net/f-developers-dungeon-47/t-libtiff-vulnerability-crashs-271-and-280-65799/page32.html
first ta-082 success and now this....woot!
of course neither of them are finished or released yet, but the proof of concept will go far very quickly :D