3 ms·
On a similar note, last year three huge security holes were discovered in ZSNES that allow an attacker to execute arbitrary x86 code using a malformed ROM. [0]
by amyjess 10y ago
On a similar note, last year three huge security holes were discovered in ZSNES that allow an attacker to execute arbitrary x86 code using a malformed ROM. [0] [1]
After seeing that and seeing this article, I'm thinking this might be the start of a whole new era of finding security holes in emulators that allow PCs to be compromised by running something shady in an emulator.
[0] https://www.reddit.com/r/emulation/comments/3aq0t3/psa_zsnes_v151_native_code_execution_vulnerability/ https://www.reddit.com/r/emulation/comments/3aq0t3/psa_zsnes...
[1] Seriously, if you're still using ZSNES to emulate SNES games, don't. That's a really scary vulnerability, it still hasn't been patched, and ZSNES has been horrendously inaccurate and buggy since even before that. Do yourself a favor and use Snes9X (or if you can, try something based on a bsnes core, like Higan, bsnes-classic, or RetroArch configured with a bsnes core; they're the most accurate, but the system requirements are high, and Higan's UI isn't user-friendly).
- sp0rk 10y agoThere was just an article about exploits in Dolphin published yesterday that I found pretty interesting: https://dougallj.wordpress.com/2016/11/13/exploiting-dolphin-part-1/ https://dougallj.wordpress.com/2016/11/13/exploiting-dolphin... I agree this will probably catch on as a popular new vector, especially given the popularity of emulators on mobile devices.
- emodendroket 10y agoRetroarch just uses cores from other emulators, doesn't it?
- amyjess 10y agoYeah, that section of my post was poorly worded. I might edit my post a bit and fiddle with the wording.
- dancek 10y ago> a whole new era of finding security holes in emulators that allow PCs to be compromised Indeed. People acquire ROMs for emulators illegally from wherever they can get them anyway. Given what you say about ZSNES, I'd be surprised if no one has yet built a botnet by spreading a ROM attacking ZSNES.