Help the PSP 3D community grow! Vote for us below:


| | Homebrew/Hacking - Discuss the latest available homebrew applications and games. |
Welcome to PSP3D.com - Sony PlayStation Portable News, Homebrew, Hacks, Reviews, Videos, Mods, Forums!
You are currently viewing our website as a guest, which gives you limited access to reply and interact to discussions and other members. By joining our free community, you will be able to post topics in the forums, communicate privately with other members, vote in polls, and access many other special features.
Registration is fast, simple, and absolutely free so join our community today!
| 
06-02-2007, 12:28 PM
| | Senior Member | | Join Date: Jan 2006
Posts: 111
Points: 27.84 Donate | | | new exploit found on 3.03 and above A vulnerability has been identified in Libpng, which could be exploited by attackers to cause a denial of service. This issue is caused by an error in the "png_handle_tRNS()" [pngrutil.c] function when processing a PNG image with a malformed tRNS chunk, which could be exploited by attackers to crash an application linked against a vulnerable library, creating a denial of service condition. FrSIRT Security Advisories - Libpng "png_handle_tRNS()" tRNS Chunk Processing Denial of Service Vulnerability / Exploit | 
06-02-2007, 01:40 PM
| | Member
My Mood: | | Join Date: Oct 2006
Posts: 78
Points: 28.35 Donate | | | Not sure about the implications for the PSP. Why did you give a topic like this a title like that?
There is no evidence to suggest it's exploitable on the PSP platform. There are so many library 'exploits' that can't be used on the PSP: (libpng, libungif, mpeg libraries, etc). If you have proof of PSP vulnerablity, please tell.
Sorry, but if you're going to post this in the news section, make sure it's news. Kthxbai.
Last edited by LostProphet : 06-02-2007 at 01:42 PM.
| 
06-02-2007, 02:32 PM
| | Member | | Join Date: Oct 2006
Posts: 61
Points: 52.51 Donate | | i was chatting to some knowledgeable guys on IRC, and it seems the best this exploit will do is crash a PSP, not run any unsigned code.....
So in essence, it is useless...
"this could be exploited by attackers to crash an application linked against a vulnerable library, creating a denial of service condition" is the key bit of info  | 
06-02-2007, 06:16 PM
| | Senior Member
My Mood: | | Join Date: Jan 2006 Location: In my house...
Posts: 602
Points: 0.01 Donate | | Yea things like this have happened on 2.50 FWs+ in the past and never lead to anythin. So yea won't work and only will crash and over flow the PSP as said already. Kind of the wrong section to put this though.  | 
06-02-2007, 09:58 PM
| | I'm eatin' ur Bandwidthz!
My Mood: | | Join Date: Nov 2005 Location: Foodcourtia. Spooky, yes?
Posts: 3,638
Points: 84,973,253,486.82 Donate | | | Well, no one thought the 2.00 - 2.80 TIFF exploit would work on the PSP, and that did. There may be a bit of hope, but don't count on it. | 
06-02-2007, 09:59 PM
| | Brings you the news
My Mood: | | Join Date: Jun 2006 Location: CT Age: 20
Posts: 1,984
Points: 144.32 Donate | | | Yeah, no offense, but this is a waste of a thread. | 
06-03-2007, 01:38 AM
| | Teh h4x0r admin
My Mood: | | Join Date: Feb 2006 Location: New York Age: 25
Posts: 960
Points: 9,999,500,268.97 Donate | | | It really does not belong in member news, either, since he just copy/pasted the text from the linked page.
Moved. | |
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | | | | Thread Tools | | | | Display Modes | Linear Mode |
Posting Rules
| You may not post new threads You may not post replies You may not post attachments You may not edit your posts HTML code is Off Points Per Thread View: 0.00 Points Per Thread: 1.00 Points Per Reply: 0.10 | | | | |