Gstreamer 0.10.x Logic Error
Posted by deepcore on December 16, 2016 – 8:23 am
A vulnerability and a separate logic error exist in the gstreamer 0.10.x player for NSF music files. Combined, they allow for very reliable exploitation and the bypass of 64-bit ASLR, DEP, etc. The reliability is provided by the presence of a turing complete “scripting” inside a music player. Read the homepage link for full analysis. Proof of concept exploit included in this archive.
Post a reply
You must be logged in to post a comment.