3 ms·
TIFF is a great example of how a terrible specification can lead to endless security vulnerabilities in parsers. http://secunia.com/advisories/search/?adv_sear
by kogir 13y ago
TIFF is a great example of how a terrible specification can lead to endless security vulnerabilities in parsers.
http://secunia.com/advisories/search/?adv_search=1&s=1&search=TIFF&vuln_title=1&vuln_bodytext=1&critical%5B%5D=0&impact%5B%5D=1&where%5B%5D=1 http://secunia.com/advisories/search/?adv_search=1&s=1&searc...
- voltagex_ 13y agoIs this the same class of exploits that affected image drawing on Windows a while back? (GDI?)
- EvanAnderson 13y agoI think you're talking about the MS06-001 vulnerability (http://technet.microsoft.com/en-us/security/bulletin/ms06-001 http://technet.microsoft.com/en-us/security/bulletin/ms06-00...) with Windows Metafile (WMF) files. This is a bug in the parser for TIFF files that allows for arbitrary code execution. MS06-001 was based on removing a "feature" of the WMF format (SETABORTPROC) that allowed for arbitrary code execution for legitimate, albeit antiquated, reasons.
- aroch 13y agoI have fond memories of the old PSP hacking scene and working on TIFF based exploits with DarkAlex, Booster and a couple others. It was really my first exposure to "hacking" and was fantastic
- tanzam75 13y ago> TIFF is a great example of how a terrible specification can lead to endless security vulnerabilities in parsers. TIFF is an Adobe spec, and we all know how great Adobe is at security ... Actually, TIFF predates Adobe involvement. It was inherited by Adobe when it bought Aldus. The file format was designed in 1986 and last revised in 1992. That's 21 years without an update -- an eternity in the computer world. Ironically, TIFF used to be known as "Aldus-Microsoft TIFF." Aldus designed the format, and Microsoft provided the marketing muscle to establish it as a de facto standard.