LXer: Interview with the Vista Pwn2Own contest winners
Published at LXer:
Nate: The flaw you discovered was in Adobe Flash, was this truly a cross-platform attack? Shane: Yeah, there’s a stack issue, where a type is accepting 3 parameters when it is defined to accept 2, possibly some polymorphism/name mangling bug, but either way, this object get’s called through the 3rd invalid/uninitialized memory that winds up jumping wherever we had pre-filled memory to. Nate: So then, do you have exploit code for all three of the operating systems, or are you certain that you could’ve written exploit code given enough time? Read More... |
All times are GMT -5. The time now is 01:17 PM. |