Libtiff Exploit for Firmware 5.50

[wraggster]

The PSP scene is moving fast now, Wololo has found a new exploit in firmware 5.50, so another thing that sony has forgot to plug.

Heres the video

http://www.youtube.com/v/qvH05SlxRsA

Theres a download in the comments for those on 5.50 to test the exploit too.

[Shrygue]

Hah, looks like as long as Sony keeps the TIFF graphic format in its firmware, the PSP just gonna keep getting hacked via that way real fast. We'll see how long it'll take before they decide to pull the plug on it.

[kyyubidx]

Not so fast... I know that other people haven't got this to work... Though I have tons of respect for Wololo I wonder how he did it...

[Zack]

Sweet :) Hackers winning the battle once more, hehe.

[Heisenberg]

Nothing more than homebrew has been run on any new FW. No iso or psx etc has been enabled yet. Think (@ this point) that not blocking (rather legit) homebrew like emulators and apps, games might be a deliberate move from Sony, seeing homebrew doesn't result in lower software sales, but obviously CSO and POPS do.
Not my brilliant prediction, really: http://gamer.blorge.com/2009/04/23/how-sony-can-stop-piracy-on-the-psp/
Kinda makes sense, time will tell

[OZBRN5]

i agree...until i see hen happening i'm not sold...but my 3000 is 5.50 so i really hope it yields something...but i still have the 1000 with m33 so whatever.

[frwololo]

Lol, I didn't know I did that.
It's probably one of my old files.
If that's the one I'm thinking about, there's probably a crash that Sony didn't fix, but it's not going to lead to an exploit.

Makes me laugh that I would need to investigate one of my own files to understand if it's useful :D

Anyways, right now my official statement on this file is the same as it was two months ago:

http://wololo.net/wagic/2009/03/15/so-what-about-the-libtiff-vulnerability/



Q: And what about firmwares above 4.20? I saw a crash on 5.02 too!

A: The fact is that the bug hasn’t been correctly solved. However, it’s been patched enough to prevent anything useful from happening with this vulnerability beyond firmware 4.20