Exploit in Wii Flash Player

[souLLy]

It may or may not turn into anything but I'm not gonna be in any rush to update my console from now on.

Details of the exploit are here: http://www.securityfocus.com/archive/1/473655

[shadowprophet]

If we could just open the door to true wii homebrew, This could mean the door to perfect working emulation for several retro consoles.
Imagine paper mario on your wii, without being milked into having to pay for the same game twice.
I would assume the roms would still need to be digitaly signed with whatever crazy new nity signitures are out there though.
unless the homebrew scene saw fit to make its own nes,snes,pc engine, ect emus for the wii.
still, if we can even get java working on the wii, Thats a good step forward.

[splodger15]

I think it is the modchips that killed Wii homebrew we need a leaked Wii SDK then we might get somewere or if someone can reverse engineer it.

PS: Thanks for that link souLLy

[Man]

Iv got my modchip, and run GC homebrew, and im quite happy. But wii homebrew could be awsome

[BlueCrab]

we need a leaked Wii SDK then we might get somewere or if someone can reverse engineer it.

A leaked Wii SDK is certainly NOT what we need. It'll just lead to the same situation that occurred with Xbox homebrew, where everything just uses that SDK (and nobody ever bothers to make a worthy replacement).

[splodger15]

Yes but it will come in handy wont it now. What do you reckon we need I think hackers every other console has one but the Wii seems to have been purchased a side

[IamAbe]

A leaked Wii SDK is certainly NOT what we need. It'll just lead to the same situation that occurred with Xbox homebrew, where everything just uses that SDK (and nobody ever bothers to make a worthy replacement).

who has time to make an sdk that already exists?? i was pretty happy with the xbox scene, who cares if we use the official sdk or not

[*Layzie*]

wow id like to see some homebrew on wii for definate

[Gold Line]

homebrew on my wii would be a dream come true

[mickshake]

I started trying different methods of loading data into flash looking for weird behavior..
loadMovie, loadMovieNum, sendAndLoad.. nothing unusual happened.

Then I came across this:
http://www.mindedsecurity.com/en/lab...emote_flv_exec

Now I really don't know much about overflows but this report gives a fair amount of detail. So I'm here with XVI32 and a few flv files sending the hacked datatype through an flv player without much to report.

I'm still looking for an flv file with a more similar pattern (none of the flv files I have contain the "framerate" var so I can get a little more into it.. if anyone knows much about the structure of an FLV file, thats apparently where we start.

I don't claim to know much at all about this sort of thing, I'm just a determined flash developer ready to give it all I've got!