Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Breaking the Chain

projectzero.google | blog | #vulnerability-management | #windows | #flash | #defense-in-depth | #exploit-mitigation | #project-zero

Summary

A Project Zero essay arguing exploit mitigations are essential since not all security bugs can be found, recounting contributions to Flash and vendor mitigation work.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
Dude, where’s my heap?
A Google Project Zero post examining heap spraying and heap address randomization, and how browser exploits can still succeed against them.
blog · projectzero.google
In-Console-Able
A Google Project Zero post describing a Windows security bug that weakens sandbox-style restrictions and could aid sandbox escape research.
blog · projectzero.google
A Tale of Two Exploits
A Google Project Zero deep dive into the exploitation techniques used against a Flash Player scripting vulnerability.
blog · projectzero.google
What does a pointer look like, anyway?
A Google Project Zero post examining memory information disclosure vulnerabilities in Flash Player and how leaked data aids exploitation.
vulnerability · projectzero.google
(^Exploiting)\s*(CVE-2015-0318)\s*(in)\s*(Flash$)
A Google Project Zero write-up exploiting CVE-2015-0318, a bug in the PCRE regular expression engine as used in Adobe Flash.
vulnerability · projectzero.google
Internet Explorer EPM Sandbox Escape CVE-2014-6350
A Google Project Zero post detailing exploitation of CVE-2014-6350 to escape Internet Explorer's Enhanced Protected Mode sandbox.
back