Quick Jump Daily Digest
Thank you for your interest in the Quick Jump Daily Digest. Get notified of all new content on QJ in our free Daily Digest. To subscribe, enter your email address below and click the subscribe button.
FrSIRT Reports libtiff exploit as a "RAISED" Risk |
Listed in: Hacks & Exploits Tags: downgrader, Exploit, FrSIRT, KXploit, libtiff, psp exploits, psp hacks, Sony
Ó
The French Security Incident Response Team has flagged the new libtiff
exploit. Apparently the exploit, which hasn't been fully implemented
yet, is already a target for Sony. With news like this, expect to see a
firmware 2.81 within the next two weeks. This is the text, as written
on the English page."Technical Description
A vulnerability has been identified in Sony PSP, which could be exploited by attackers to execute arbitrary commands. This flaw is due to an error in the Photo Viewer when handling malformed TIFF images using libTIFF, which could be exploited by attackers to compromise a vulnerable device by tricking a user into opening a malicious image."
Trends such as this have been seen before, with the 1.5 KXploit release. 3 weeks later, we were handed 1.51. And then, after the original photo exploit in 2.0, it was only two and a half weeks before 2.1 came out. And with the 2.5/2.6 downgrader came 2.7. And now a 2.8. This is sad news, but we can urge all of you: If you want to use homebrew and you think it's too late since you have 2.8 already, DO NOT UPGRADE. When a 2.81 comes out, you can bet work will continue on hacking the original 2.8.
EXTRA: The FrSIRT page has a references list, and guess who's on it? That's right, QJ. A thread in the Developers Dungeon was added to the research and reference list that contributed to the decision to raise the risk level.
Via FrSIRT
| This story sucks? This story rocks! |
|
|
Comments
Reply
Reply
Reply
Reply
Reply
"malicious" isnt that when u are trying to do something bad? how is trying to make you own games malicious?
Reply
Reply
Reply
Reply
Reply
Meaning that other people would have patched this and $ony would have simply used that patch in 3.00
Reply
Reply
Reply
Reply
anything to make it sound like sony are doing the right thing by patching it up! ;)
Good ole' sony!
1.5 FTW!!!!!!!!!!!! !!
Reply
14: That wouldnt have mattered seeing as there isnt a kernel expoit yet on 2.8. unless the exploit magically reopens on 3.0 or whatever.
Reply
Reply
Reply
Reply
wow... nice...
Reply
Besides i bought this machine i paid my damn money and if sony doesn't like that then they can take my psp and give me my money back, and if everybody else does this i'll laugh and watch sony go broke, hey, sony let's not forget the reason you're sitting on that cash is because someone bought your product. NEVER forget that.
Reply
oh joy, here comes a remake of the 2.0 bricker trojan. ¬¬
Reply
i mean, if u were really clever and wicked enough to be a terrorist to do somthing u would have found another exploit ANYWAY and downgraded and used "terroristic homebrew!" this is juz sony's weak attempt to stop d/graders and h/brew
cmon, u might find homebrew developed for terrorism or summat but this is juz ga* saying it's a way to brick ur psp or something. it's not, it's so we can enjoy what sony has been to laid back to develop
Reply
wtf
the 2.5/2.6 downgrader came out in July
firmware 2.7 came out in April
also
there was never 2.1
it was 2.01
Reply
Reply
STICK IT TO THE MAN!
Nice job on the reference QJ...
Reply
Reply