Printable View
The French Security Incident Response Team (FrSIRT) has reported the libtiff exploit as a "Raised" risk category exploit.
The URL is
http://www.frsirt.com/bulletins/6778
The Japanese media is reporting this as a HIGH RISK exploit. Itmedia is particularly vocal on this one
http://www.itmedia.co.jp/enterprise/...1/news051.html
With all this high attention it is becoming quite clear that we should see an updated firmware coming up soon sometime from Sony.
Translation and More Via Comments
if only i could read japanese
can someone translate this please
http://translate.google.com/translat...language_tools
Thats the translated page :) for those not bothered to view it haha heres the translation:-
In PSP vulnerability of not yet patch
The vulnerability “of High Risk” was discovered with Photo Viewer of PSP.
2006 September 01st 14:48 renewals
The french security system FrSIRT reported that August 31st, with the SONY portable game machine “PSP” vulnerability was discovered. Degree of risk 2nd is high in, it is made “High Risk”.
As for this vulnerability, error occurring the occasion where the TIFF picture of the illegitimate type where “Photo Viewer” of PSP used libTIFF is processed causes. When the attack person abuses this vulnerability, you say that by the fact that the illegitimate picture is made to open to the user, fragility being able to execute optional command it finishes on PSP.
As for receiving the influence of this problem the firmware version 2.00~2.80 of PSP. The patch which corrects this vulnerability is not offered.
----------------------------------------------------------------
I think what its trying to say in other words is that Sony have not offered a patch yet and may not be able to as a tiff file is...well a tiff file haha, they could remove tiff support but then we can hack into the tag of a MP3 file, and if they remove that people will get angry.
WARNING: You may gain full access to the hardware you paid for. *HIGH RISK*
Briggzy11: has a buffer overflow exploit been discovered in the psps id3 tag code?
WTF?
Can somebody break this down into noobz terms for me?
i smell 2.81
I hope not they should just bring out 3.00 so people can hack it already lol and i know theres gnna be some people that will upgrade ti 2.81( if it comes out) then theyll be pi$$ed they cant have homebrew when 2.8 is hackedQuote:
Originally Posted by benh
yeah they should bring out 3.00 but you know sony, they wont bring out 3.00 straight away, they'll bring out a patch first
Quote:
Originally Posted by Panini
your PSP copuld be used as a bomb on a flight.:eek:
add it to the list of hairgel, milk and every other feckin thing they talk about lately.