LibGif Still Vunerable ? - PSP3D.com - Sony PlayStation Portable News, Homebrew, Hacks, Reviews, Videos, Mods, Forums

shanemac · #1 (**permalink**) 03-23-2006, 04:36 PM

I was looking around at various exploits and came across this.

Actual link: http://scary.beasts.org/security/CESA-2005-007.txt

Brief Summary (From page) :

CESA-2005-007 - rev 1

libungif / libgif GIF decompression vulnerabilities
========================= ========================= =

Programs affected: libungif, libgif
Severity: Possible arbitrary code execution.
Vendor fixed date: Oct 18th, 2005
Fixed: v4.1.4
CVE identifier(s): CVE-2005-2974, CVE-2005-3350

Credit to Daniel Eisenbud who independently discovered and fixed this issue.

The following GIFs, produced by fuzzing, were observed to crash libungif:

Demo GIFs: http://scary.beasts.org/misc/bad1.gif

------------------------

Anyway to cut a long story short.....

I tried the first one "bad1.gif" and went into photo viewer in the shell, no corrupt icon and it locked the PSP up and it switched off. Your opinons guys ( 'n gals!)?

Any coders wanna give it a go ?

TchuBacha · #2 (**permalink**) 03-23-2006, 04:39 PM

I tihnk this has been mentioned before somewhere and it could only cause crashes.

shanemac · #3 (**permalink**) 03-23-2006, 04:44 PM

But there are two other gifs on the actual link which can could cause the execution of code ?

Drakhra · #4 (**permalink**) 03-23-2006, 04:48 PM

i think some major league hackers rejected this

shanemac · #5 (**permalink**) 03-23-2006, 04:51 PM

I tried the seond gif as well same result as the first, locked up and shut off. Just some speculation guys, Just a thought!

kernal32 · #6 (**permalink**) 03-23-2006, 08:22 PM

yeah this was looked into, but it was just a crash, they wern't able to execute code from it

romaNce · #7 (**permalink**) 03-23-2006, 08:27 PM

): it'd be nice

jcoolkatzerg · #8 (**permalink**) 03-23-2006, 08:40 PM

Ya, this only crashed the psp...No code ever ran, yet. I belive this was butterballer360's project....