QJ.net Game Discussion - PSP, Xbox, Wii, PS3, PSP Homebrew, and PSP Guides

liqu0ta · 06-08-2006, 03:03 PM

Can anyone confirm if this would run on 2.0+ psp's?

libTIFF in securityFocus

**TheRaiderNation** · 06-08-2006, 03:04 PM

woah! this thing was discovered today?

**TeamOverload** · 06-08-2006, 03:05 PM

Not sure. It is recent, so it is a possibilty.

**QJ PIRATE** · 06-08-2006, 03:07 PM

Wait, so Is that another overflow for 2.0 or 2.01+?

**alanpsp** · 06-08-2006, 03:26 PM

have you tried to run anything on this "exploit"....

**mannymix03** · 06-08-2006, 03:29 PM

wasnt tiff support taken out after 2.0?

DevilShadow · 06-08-2006, 03:30 PM

Quote:

Originally Posted by Floppydrive

wasnt tiff support taken out after 2.0?

nop

it was just patched

**QJ PIRATE** · 06-08-2006, 03:30 PM

Nope just the known "vulnerable" parts.

**mannymix03** · 06-08-2006, 03:32 PM

ahhh, ok, i thought it was completely taken out,

I dunno if this could work though, ill leave it up to the cracking masters

**Chrono6456** · 06-08-2006, 03:33 PM

how do you, umm try this, i could try it with devhook

**mannymix03** · 06-08-2006, 03:36 PM

you cant just try it, someone has to make the tiff file so that it executes foriegn code

**QJ PIRATE** · 06-08-2006, 03:39 PM

Some one tell Freeplay, or fanjita about this...

rik_the_viking · 06-08-2006, 03:40 PM

looks fairly linux specific to me, look at the list of affected systems

**QJ PIRATE** · 06-08-2006, 03:41 PM

couldnt hurt trying it out on the psp tho, even if it is only linux affected..worth a shot right?

**Theknightinhell** · 06-08-2006, 03:44 PM

Quote:

Originally Posted by Floppydrive

wasnt tiff support taken out after 2.0?

Why does everyone think that TIFF support was removed?

**Smiffers** · 06-08-2006, 03:47 PM

I hate to say it, but it looks like it'll be the same as the tiffsplit thing. "tiff2pdf" seems to be a different application outside of libtiff, and as such, will never work on the PSP ='(.

**QJ PIRATE** · 06-08-2006, 03:50 PM

I say we find a expert like freeplay or fanjita or whoever knows there stuff to take alook at this so we can move on or lock this thread.

**GmDude66** · 06-08-2006, 03:51 PM

First of all.. Does anyone know what version of LibTiff PSP 2.60 is using ?

~Derek~

**Countach** · 06-08-2006, 03:53 PM

2.60? who knows... 2.00 was using 3.7.1, 3.7.2, or 3.7.3. I m assuming it got higher with the firmware updates,

**PSPduh** · 06-08-2006, 03:58 PM

Fanjita and Freeplay aren't even on. Anybody else who is real experienced like them?
Ditlew isn't on, niether is moonlight.
All the great minds seemed to take a day off.
--PSPduh

**TeamOverload** · 06-08-2006, 04:01 PM

This exploit goes up to 3.81, while the latest version is 3.82 which was released on March 23rd. This would mean 2.7+ are probably patched.

**QJ PIRATE** · 06-08-2006, 04:01 PM

Well since no one isonline would any1 be mad if i took this thread and sent it to a few people on other forums to see what they think???

**TeamOverload** · 06-08-2006, 04:02 PM

Doesn't matter, but read my above statement.

SasukeUchiha · 06-08-2006, 04:02 PM

Yah, this won't work on the PSP. A google search will reveal tiff2pdf is a utility for converting tiff images to PDF files for Adobe Reader, so yah, it's like tiffsplit and won't work.

**Chathurga** · 06-08-2006, 04:05 PM

Quote:

Originally Posted by SasukeUchiha

Yah, this won't work on the PSP. A google search will reveal tiff2pdf is a utility for converting tiff images to PDF files for Adobe Reader, so yah, it's like tiffsplit and won't work.

pwned

**QJ PIRATE** · 06-08-2006, 04:05 PM

Well, 2.7+ who cares about? alot of people want a 2.1-2.6 downgrade or exploit and 2.7+ can be worked on later, why put a downer on things TO?

EDIT: Looks like it doesnt even work for the psp says the person above me, so w/e. close this thread.

**Chathurga** · 06-08-2006, 04:08 PM

Quote:

Originally Posted by death is life

Well, 2.7+ who cares about?

2.7+ users care....
Like TeamOverload.

**Smiffers** · 06-08-2006, 04:08 PM

Quote:

Originally Posted by Chathurga

2.7+ users care....

2.7 users should've known not to upgrade.

**FullMetalCat** · 06-08-2006, 04:09 PM

Oooh, interesting *rubs hands togethter*

**QJ PIRATE** · 06-08-2006, 04:11 PM

whoever has 2.7+ users shouldnt have updated, they should have waited till they knew there was homebrew, And i know some people upgraded knowing there was no-homebrew anyway, i love how they make the decision to upgrade then when they get bored with the features whine for a exploit...Of course thier are the hackers for 2.7 that i respect for updating and testing stuff but they arent whining about getting homebrew they are trying to get homebrew.

2.7+ users if homebrew ever comes it will, until then quit with the whining you made the decision get over it.

06-08-2006, 03:03 PM	#1
liqu0ta Join Date: May 2006 Posts: 9 Trader Feedback: 0	LibTIFF Buffer Overflow Vulnerability Can anyone confirm if this would run on 2.0+ psp's? libTIFF in securityFocus

06-08-2006, 03:04 PM	#2
TheRaiderNation Join Date: Jul 2005 Location: San Leandro, Califor Posts: 3,374 Trader Feedback: 0	woah! this thing was discovered today? __________________ [CENTER][IMG]http://img168.imageshack.us/img168/597/pspart1ym7.png[/IMG][IMG]http://img210.imageshack.us/img210/8163/giffffffjn1.gif[/IMG][IMG]http://img329.imageshack.us/img329/7646/pspart3eq2.png[/IMG] [COLOR="DarkGreen"][U] Xbox 360 Elite[/U][/COLOR] [COLOR="Black"]\|[/COLOR] [COLOR="Navy"][U]PlayStation 3 60GB[/U][/COLOR][/CENTER] [CENTER][COLOR="Green"]XBL: RaiderNation56[/COLOR][COLOR="Black"]\|[/COLOR][COLOR="Blue"]PSN: TheRaiderNation[/COLOR] [URL="http://www.spore.com/view/profile/TheRaiderNation"][IMG]http://www.pix-hoster.com/userbar/userbars/99_146_1_63.png[/IMG][/URL][/CENTER]

06-08-2006, 03:05 PM	#3
TeamOverload Rock Star FamousLastX Join Date: Aug 2005 Location: CT\| FW: 4.01 M33-2 Posts: 11,844 Trader Feedback: 0	Not sure. It is recent, so it is a possibilty. __________________

06-08-2006, 03:07 PM	#4
QJ PIRATE Join Date: May 2006 Location: peabody Posts: 619 Trader Feedback: 0	Wait, so Is that another overflow for 2.0 or 2.01+? __________________ [B][U]Favorite People[/U][/B] [COLOR="Red"]Abe Froeman And Twelve[/COLOR] [COLOR="Purple"]Serideth[/COLOR] [COLOR="Blue"]Fanjita[/COLOR] [COLOR="Black"]Spartan[/COLOR] [COLOR="Yellow"]xjackx410[/COLOR] [IMG]http://i145.photobucket.com/albums/r239/GFXD/CarrotSig.png[/IMG] Go [URL="http://gfxdgaming.spreebb.com/index.php?act=idx"]Here[/URL] to see my site!

06-08-2006, 03:26 PM	#5
alanpsp Join Date: Jan 2006 Posts: 768 Trader Feedback: 0	have you tried to run anything on this "exploit".... __________________ [img]http://img97.imageshack.us/img97/7205/mexicouserbar02oi7.gif[/img]

06-08-2006, 03:30 PM	#8
QJ PIRATE Join Date: May 2006 Location: peabody Posts: 619 Trader Feedback: 0	Nope just the known "vulnerable" parts. __________________ [B][U]Favorite People[/U][/B] [COLOR="Red"]Abe Froeman And Twelve[/COLOR] [COLOR="Purple"]Serideth[/COLOR] [COLOR="Blue"]Fanjita[/COLOR] [COLOR="Black"]Spartan[/COLOR] [COLOR="Yellow"]xjackx410[/COLOR] [IMG]http://i145.photobucket.com/albums/r239/GFXD/CarrotSig.png[/IMG] Go [URL="http://gfxdgaming.spreebb.com/index.php?act=idx"]Here[/URL] to see my site!

06-08-2006, 03:33 PM	#10
Chrono6456 Join Date: Jun 2005 Posts: 3,222 Trader Feedback: 0	how do you, umm try this, i could try it with devhook __________________ [SIZE="4"][CENTER]Jeremy Clarkson, Richard Hammond, and James May = Gods[/CENTER][/SIZE]

06-08-2006, 03:39 PM	#12
QJ PIRATE Join Date: May 2006 Location: peabody Posts: 619 Trader Feedback: 0	Some one tell Freeplay, or fanjita about this... __________________ [B][U]Favorite People[/U][/B] [COLOR="Red"]Abe Froeman And Twelve[/COLOR] [COLOR="Purple"]Serideth[/COLOR] [COLOR="Blue"]Fanjita[/COLOR] [COLOR="Black"]Spartan[/COLOR] [COLOR="Yellow"]xjackx410[/COLOR] [IMG]http://i145.photobucket.com/albums/r239/GFXD/CarrotSig.png[/IMG] Go [URL="http://gfxdgaming.spreebb.com/index.php?act=idx"]Here[/URL] to see my site!

06-08-2006, 03:40 PM	#13
rik_the_viking Join Date: Mar 2006 Posts: 28 Trader Feedback: 0	looks fairly linux specific to me, look at the list of affected systems

06-08-2006, 03:41 PM	#14
QJ PIRATE Join Date: May 2006 Location: peabody Posts: 619 Trader Feedback: 0	couldnt hurt trying it out on the psp tho, even if it is only linux affected..worth a shot right? __________________ [B][U]Favorite People[/U][/B] [COLOR="Red"]Abe Froeman And Twelve[/COLOR] [COLOR="Purple"]Serideth[/COLOR] [COLOR="Blue"]Fanjita[/COLOR] [COLOR="Black"]Spartan[/COLOR] [COLOR="Yellow"]xjackx410[/COLOR] [IMG]http://i145.photobucket.com/albums/r239/GFXD/CarrotSig.png[/IMG] Go [URL="http://gfxdgaming.spreebb.com/index.php?act=idx"]Here[/URL] to see my site!

06-08-2006, 03:47 PM	#16
Smiffers Join Date: May 2006 Posts: 334 Trader Feedback: 0	I hate to say it, but it looks like it'll be the same as the tiffsplit thing. "tiff2pdf" seems to be a different application outside of libtiff, and as such, will never work on the PSP ='(.

06-08-2006, 03:50 PM	#17
QJ PIRATE Join Date: May 2006 Location: peabody Posts: 619 Trader Feedback: 0	I say we find a expert like freeplay or fanjita or whoever knows there stuff to take alook at this so we can move on or lock this thread. __________________ [B][U]Favorite People[/U][/B] [COLOR="Red"]Abe Froeman And Twelve[/COLOR] [COLOR="Purple"]Serideth[/COLOR] [COLOR="Blue"]Fanjita[/COLOR] [COLOR="Black"]Spartan[/COLOR] [COLOR="Yellow"]xjackx410[/COLOR] [IMG]http://i145.photobucket.com/albums/r239/GFXD/CarrotSig.png[/IMG] Go [URL="http://gfxdgaming.spreebb.com/index.php?act=idx"]Here[/URL] to see my site!

06-08-2006, 03:51 PM	#18
GmDude66 Give It All Join Date: Jan 2006 Real First Name: Derek Location: United States Just Played: Burnout Paradise Posts: 3,899 Blog Entries: 1 Trader Feedback: 0	First of all.. Does anyone know what version of LibTiff PSP 2.60 is using ? ~Derek~

06-08-2006, 03:53 PM	#19
Countach Join Date: Dec 2005 Location: South Carolina Posts: 101 Trader Feedback: 0	2.60? who knows... 2.00 was using 3.7.1, 3.7.2, or 3.7.3. I m assuming it got higher with the firmware updates,

06-08-2006, 03:58 PM	#20
PSPduh PwnerOfMe Join Date: Mar 2006 Location: LOLWUT Posts: 2,625 Trader Feedback: 1	Fanjita and Freeplay aren't even on. Anybody else who is real experienced like them? Ditlew isn't on, niether is moonlight. All the great minds seemed to take a day off. --PSPduh

06-08-2006, 04:01 PM	#21
TeamOverload Rock Star FamousLastX Join Date: Aug 2005 Location: CT\| FW: 4.01 M33-2 Posts: 11,844 Trader Feedback: 0	This exploit goes up to 3.81, while the latest version is 3.82 which was released on March 23rd. This would mean 2.7+ are probably patched. __________________

06-08-2006, 04:02 PM	#23
TeamOverload Rock Star FamousLastX Join Date: Aug 2005 Location: CT\| FW: 4.01 M33-2 Posts: 11,844 Trader Feedback: 0	Doesn't matter, but read my above statement. __________________

06-08-2006, 04:02 PM	#24
SasukeUchiha Join Date: Apr 2006 Posts: 32 Trader Feedback: 0	Yah, this won't work on the PSP. A google search will reveal tiff2pdf is a utility for converting tiff images to PDF files for Adobe Reader, so yah, it's like tiffsplit and won't work.

06-08-2006, 04:05 PM	#26
QJ PIRATE Join Date: May 2006 Location: peabody Posts: 619 Trader Feedback: 0	Well, 2.7+ who cares about? alot of people want a 2.1-2.6 downgrade or exploit and 2.7+ can be worked on later, why put a downer on things TO? EDIT: Looks like it doesnt even work for the psp says the person above me, so w/e. close this thread. __________________ [B][U]Favorite People[/U][/B] [COLOR="Red"]Abe Froeman And Twelve[/COLOR] [COLOR="Purple"]Serideth[/COLOR] [COLOR="Blue"]Fanjita[/COLOR] [COLOR="Black"]Spartan[/COLOR] [COLOR="Yellow"]xjackx410[/COLOR] [IMG]http://i145.photobucket.com/albums/r239/GFXD/CarrotSig.png[/IMG] Go [URL="http://gfxdgaming.spreebb.com/index.php?act=idx"]Here[/URL] to see my site! Last edited by C@RR0T; 06-08-2006 at 04:08 PM..

06-08-2006, 04:09 PM	#29
FullMetalCat Join Date: Feb 2006 Location: Los Angeles Posts: 2,937 Trader Feedback: 0	Oooh, interesting rubs hands togethter __________________ NOT NOW JONATHAN

06-08-2006, 04:11 PM	#30
QJ PIRATE Join Date: May 2006 Location: peabody Posts: 619 Trader Feedback: 0	whoever has 2.7+ users shouldnt have updated, they should have waited till they knew there was homebrew, And i know some people upgraded knowing there was no-homebrew anyway, i love how they make the decision to upgrade then when they get bored with the features whine for a exploit...Of course thier are the hackers for 2.7 that i respect for updating and testing stuff but they arent whining about getting homebrew they are trying to get homebrew. 2.7+ users if homebrew ever comes it will, until then quit with the whining you made the decision get over it. __________________ [B][U]Favorite People[/U][/B] [COLOR="Red"]Abe Froeman And Twelve[/COLOR] [COLOR="Purple"]Serideth[/COLOR] [COLOR="Blue"]Fanjita[/COLOR] [COLOR="Black"]Spartan[/COLOR] [COLOR="Yellow"]xjackx410[/COLOR] [IMG]http://i145.photobucket.com/albums/r239/GFXD/CarrotSig.png[/IMG] Go [URL="http://gfxdgaming.spreebb.com/index.php?act=idx"]Here[/URL] to see my site!

QJ.net Game Discussion - PSP, Xbox, Wii, PS3, PSP Homebrew, and PSP Guides

LibTIFF Buffer Overflow Vulnerability