PS Jailbreak exploit reverse engineering

News via http://www.eurasia.nu/modules.php?na...ticle&sid=2606

modrobert writes: "Phire with the help of others over at lan.st has written an interesting analysis (mirror) of how the PSJailbreak exploit works. Here's a not so random quote from the post: 'The initial analysis by gamefreax.de suggested that it was a Stack overflow attack. After further analysis it turns out that this exploit is a Heap Overflow attack. The exploit carefully manipulates the heap by plugging and unplugging fake usb devices with large device descriptors until the device on port 4 which misreports its size to overwrite one of malloc's boundary tags.'"