Bug in the armor: Opera has vulnerable code |
Ó
We don't know how this affects the Wii, but... This ain't the kind of exploit that makes the homebrewers smile. This is the one that pisses everybody off. iDefense Labs reports that there's a bug in Opera's implementation of JavaScript that can potentially allow someone "to execute arbitrary code on the affected host". Last time this writer heard this phrase, he had to dump a ton of useless popup exes and malware code out of his PC HDD; hence, the piss everyone off comment. It ain't a pretty sight, you know. Exploitation of this vulnerability would allow an attacker to execute arbitrary code on the affected host. The attacker would first need to construct a website containing the malicious JavaScript and trick the vulnerable user into visiting the site. This would trigger the vulnerability and allow the code to execute with the privileges of the local user.
Like we said: we don't know how this affects the Wii. The iDefense Labs report doesn't contain anything Wii-specific, so absent the guy in this room with the IT degree, we don't know the dynamics of this exploit in the white box (With Wii Opera, you'd expect iDefense Labs to start gathering intel on vulnerabilities as they affect the Wii...). Anyway, the latest Opera for PC platforms corrects this bug. With the Opera on Wiis right now a running beta, it's a good bet this flaw will be patched up in a final release as well.
29 Jumps Sega's Mega Sale on PSN
Contact Us:
The QJ.net Network |
 |
| Site | Feed |
| QJ.NET | RSS |
| Nintendo DS | RSS |
| PlayStation 3 | RSS |
| PSP Updates | RSS |
| Wii | RSS |
| Xbox 360 | RSS |
| MMORPG | RSS |
| Personal Computer Games | RSS |
| iPhone - iPod Touch | RSS |
| QJ.NET Forums | RSS |
Add QJ.NET
User Favorites - December
User Favorites - December
| Top Jumps | |
| Custom Firmware 5.50GEN-D3.. | (2700) |
| Custom Firmware 5.50GEN-D3.. | (1013) |
| Custom Firmware 5.50GEN-D3.. | (508) |
| Tiger Woods Wife Outrun Fl.. | (504) |
| MaGiXieN: 6.xxGEN is not w.. | (409) |
| MaGiXieN explains release.. | (358) |
| Custom Firmware 5.03GEN-C.. | (298) |
| PSP Homebrew: CFW 5.03 GEN.. | (206) |
| Custom firmware 5.50GEN-D.. | (169) |
| Wii homebrew - Custom IOS3.. | (107) |
| PSP Revolution v0.3 | (95) |
| Naruto Shippuden: Ultimate.. | (91) |
| PS3 optional update 3.15 d.. | (85) |
| No plans for custom firmwa.. | (84) |
| PSP homebrew - DaedalusX64.. | (83) |
| PSP Homebrew - PSPDisp v0... | (82) |
| Resident Evil 5 patch 1.03.. | (79) |
| PSP homebrew game: PSP Mar.. | (74) |
| Sony starts talking about.. | (72) |
| gpSP v0.9 for the PSP | (71) |
| PS3 is year's best platfor.. | (70) |
| PSPlayerMT For PSP - Direc.. | (66) |
| PSP homebrew - PSP Live TV.. | (66) |
| Sony sells 440,000 PS3 uni.. | (66) |
| PSP homebrew - DaedalusX6.. | (66) |
Categories
Archives
December 2009
November 2009
October 2009
September 2009
August 2009
July 2009
June 2009
May 2009
April 2009
March 2009
February 2009
January 2009
December 2008
November 2008
October 2008
September 2008
August 2008
July 2008
June 2008
May 2008
April 2008
March 2008
February 2008
January 2008
December 2007
November 2007
October 2007
September 2007
August 2007
July 2007
June 2007
May 2007
April 2007
March 2007
February 2007
January 2007
December 2006
November 2006
October 2006
September 2006
August 2006
July 2006
June 2006
May 2006
April 2006
March 2006
February 2006
January 2006
Comments
With a lack of a firewall on the Wii, I don't like the sounds of this one bit :/ Lets hope they provide a patch soon.
This is EXACTLY the kind of bug that hackers want on the Wii. Anytime you see "execute arbitrary code" you can just go ahead and think 'hack hole'. And this does not affect the Wii one bit as far as viruses go. Why? Because there are NO viruses written for the Wii. Until modders hack this to advantage, nobody will know HOW to write a virus for the Wii. No, this is all plus and no minus for the Wii. For PCs, it's 'yet another hole' and that's it. Opera will patch it and avert the end of the world, again. -yawn-
you guys are all stupid. first off this is why the javascript in the wii browser is built differently form the ground up with some things removed. if this hole is still present, its not a threat to wii. Why? the arbitrary code has to be native to the processor. Is anyone able to compile a Wii program yet who isnt an official developer? no... nevermind one as complex as running within another process?
http://www.ps3news.com/forums/wii-chat/wii-opera-vulnerability-46723.html well they can make the Wii crash from this bug so lets hope they can get some kind of code working from it
And I wonder why Microsoft doesn't have a browser in the Xbox 360, especially Internet Explorer. god people quit *****in and get off your asses to your computer!
Add New Comment