02-06-2008, 10:53 PM
|
#53
|
Join Date: Dec 2005
Location: h0000000rj
Posts: 12,858
|
who said only women get breast implants, ol ol ol
----
Yep, fake. And so is their "exploit TIFF." As I posted on ps3hax:
Quote:
Shame that this is a fake, too.
It's a real TIFF from a real exploit, sure, but the exploit was discovered in libTIFF in 2006 and FIXED in a LibTIFF 3.8.2 patch. Oh, and it was never capable of running code; only of crashing the client.
Code:
>>> # LibTIFF 3.8.2 unpatched | >>> # LibTIFF 3.8.2 patched
>>> snippet(0x2) | >>> snippet(0x2)
* Read offset to next directory for sequential |
* scans. | /*
*/ | * Check for integer overflow when
(void) ReadOK(tif, &nextdiroff, | * validating the dir_off, otherwise
sizeof (uint32)); | * a very high offset may cause an
} else { | * OOB read and crash the client.
toff_t off = tif->tif_diroff; | * -- taviso@google.com, 14 Jun 2006.
| */
|if (off + sizeof (uint16) > tif->tif_size) { | |if (off + sizeof (uint16) > tif->tif_size ||
TIFFErrorExt(tif->tif_clientdata, module, | off > (UINT_MAX - sizeof(uint16))) {
"%s: Can not read TIFF directory count", | TIFFErrorExt(tif->tif_clientdata, module,
tif->tif_name); | "%s: Can not read TIFF directory count",
return (0); | tif->tif_name);
>>> | >>>
Read about it here. The author of the original proof-of-concept is Tavis Ormandy. Here, read some more.
Notice the highlighted bit above, and the highlighted bit below:
Seriously, people, this took me less than a minute with Google and a hex editor to figure out.
Tip to fakers: Next time, at least be intelligent enough to null out the bytes containing the name of the author of the proof-of-concept.
|
__________________
[qj now fails.]
Last edited by FreePlay; 02-06-2008 at 11:19 PM..
|
|
|
You can see the blackness turning a bit lighter when the image appears. Don't know if that's relevant or not, but I thought since PSP programs don't do that, why would the PS3's?
