[Dailydave] New embedded attack class

Barnaby Jack bjack at juniper.net
Sat May 5 15:53:29 EDT 2007


I've had a few discussions with some people on whether this should be billed as an attack class. I tend to agree this should be re-worded.
 
Let's go with "New exploitation method"
 
Cheers!
 
-Barnes

________________________________

From: dailydave-bounces at lists.immunitysec.com on behalf of Barnaby Jack
Sent: Fri 5/4/2007 7:22 PM
To: dailydave at lists.immunitysec.com
Subject: [Dailydave] New embedded attack class




Hey all,

I've released a short paper on the new attack class mentioned in my CSW presentation.

Respect to all those who didn't buy into quack speculation before the talk was given :)

Vector Rewrite Attack: Exploitable NULL pointer vulnerabilities on ARM and XScale architectures
http://www.juniper.net/solutions/literature/white_papers/Vector-Rewrite-Attack.pdf

-Barnes
_______________________________________________
Dailydave mailing list
Dailydave at lists.immunitysec.com
http://lists.immunitysec.com/mailman/listinfo/dailydave



More information about the Dailydave mailing list