800+ IT
News
als RSS Feed abonnieren📚 Gstreamer 0.10.x Logic Error
💡 Newskategorie: PoC
🔗 Quelle: packetstormsecurity.com
A vulnerability and a separate logic error exist in the gstreamer 0.10.x player for NSF music files. Combined, they allow for very reliable exploitation and the bypass of 64-bit ASLR, DEP, etc. The reliability is provided by the presence of a turing complete "scripting" inside a music player. Read the homepage link for full analysis. Proof of concept exploit included in this archive. ...