Friday, May 27, 2011

libxml vulnerability and interesting integer issues

›
A while ago, I was playing with grammar-based XPath fuzzing and I found and fixed an interesting libxml bug. The commit, for the curious, is...
Wednesday, May 25, 2011

Bug bounties vs. black (& grey) markets

›
I'm just back from the fun that was HiTB Amsterdam 2011. (Plug: you should check out one of the HiTB series if you haven't yet; Dhil...
3 comments:
Wednesday, April 27, 2011

Fiddling with Chromium's new certificate pinning

›
Over the past few years, there have been various high-profile incidents and concerns with the Certificate Authority-based infrastructure tha...
3 comments:
Wednesday, March 9, 2011

Multi-browser heap address leak in XSLT

›
It's not often that I find a bug that affects multiple different codebases in the same way, but here is an interesting info-leak bug tha...
9 comments:
Tuesday, March 8, 2011

Busy Chrome day...

›
I did a bunch of fairly interesting things with my corporate hat on today (not to be confused with any of my personal research ;-) Firstly, ...
1 comment:
Saturday, March 5, 2011

Dangerous file write bug in Foxit PDF Reader

›
This is fixed in the recently released Foxit PDF Reader v4.3.1.0218. That release is marked as an important security update , although this ...
2 comments:
Thursday, February 24, 2011

I got accidental code execution via glibc?!

›
The story of Chromium security bug 48733 , with guest Cris Neckar, part I It has been a long time now, but the story of Chromium security bu...
5 comments: