Vulnerabilities

From Vita Developer wiki
Revision as of 15:14, 11 February 2017 by GregoryRasputin (talk | contribs) (Created page with "== Userland == === WebKit 531 (Vita FW BEFORE 2.00) === There are two exploits used for WebKit prior to 2.00. One is a data leakage exploit CVE-2010-4577 <ref>https://code.g...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Userland

WebKit 531 (Vita FW BEFORE 2.00)

There are two exploits used for WebKit prior to 2.00. One is a data leakage exploit CVE-2010-4577 [1] using type confusion to treat a double as a string memory address and length. The other is a type confusion exploit CVE-2010-1807 on the parseFloat() function using a Nan as the arg. [2]

  1. ↑ https://code.google.com/p/chromium/issues/detail?id=63866
  2. ↑ http://imthezuk.blogspot.com/2010/11/float-parsing-use-after-free.html
Retrieved from "http://www.psdevwiki.com/vita/index.php?title=Vulnerabilities&oldid=5067"