Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

FireEye Exploitation: Project Zero’s Vulnerability of the Beast

projectzero.google | blog | #network-security | #exploitation | #fireeye | #project-zero | #appliance-security

Summary

An analysis of vulnerabilities in FireEye network security appliances, which organizations deploy on internal networks and connect to SPAN or mirror ports at egress points for traffic monitoring.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
What is a "good" memory corruption vulnerability?
A Google Project Zero essay on what makes a memory corruption vulnerability valuable, focusing on how reliably it can be exploited.
blog · projectzero.google
Analysis and Exploitation of an ESET Vulnerability
A Google Project Zero write-up analyzing and exploiting a vulnerability in ESET antivirus software, highlighting the attack surface introduced by security products.
blog · projectzero.google
Owning Internet Printing - A Case Study in Modern Software Exploitation
A Google Project Zero case study demonstrating a complete exploit chain against the CUPS internet printing service.
blog · projectzero.google
Dude, where’s my heap?
A Google Project Zero post examining heap spraying and heap address randomization, and how browser exploits can still succeed against them.
blog · projectzero.google
In-Console-Able
A Google Project Zero post describing a Windows security bug that weakens sandbox-style restrictions and could aid sandbox escape research.
blog · projectzero.google
A Tale of Two Exploits
A Google Project Zero deep dive into the exploitation techniques used against a Flash Player scripting vulnerability.
back