Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Taming the wild copy: Parallel Thread Corruption

projectzero.google | blog | #rce | #vulnerability-research | #exploitation | #memory-corruption | #project-zero | #parallel-thread

Summary

A Google Project Zero post on a 'wild copy' parallel thread memory corruption bug and its exploitation.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
The poisoned NUL byte, 2014 edition
A Google Project Zero post revisiting the classic poisoned NUL byte bug and what a single NUL write can achieve on modern systems.
research · projectzero.google
Finding and exploiting ntpd vulnerabilities
A Google Project Zero guest post telling how one of the researchers found and exploited vulnerabilities in the ntpd network time server.
blog · projectzero.google
What is a "good" memory corruption vulnerability?
A Google Project Zero essay on what makes a memory corruption vulnerability valuable, focusing on how reliably it can be exploited.
blog · projectzero.google
Analysis and Exploitation of an ESET Vulnerability
A Google Project Zero write-up analyzing and exploiting a vulnerability in ESET antivirus software, highlighting the attack surface introduced by security products.
blog · projectzero.google
Owning Internet Printing - A Case Study in Modern Software Exploitation
A Google Project Zero case study demonstrating a complete exploit chain against the CUPS internet printing service.
blog · projectzero.google
In-Console-Able
A Google Project Zero post describing a Windows security bug that weakens sandbox-style restrictions and could aid sandbox escape research.
back