Zero-sized heap allocations vulnerability analysis

Applications of theorem proving for securing the windows kernel

Julien Vanegue

Video Player

Close

Media error: Format(s) not supported or source(s) not found

Download File: https://dortmund.media.ccc.de//congress/2010/mp4-h264-HQ/27c3-4209-en-zero_sized_heap_allocations_vulnerability_analysis.mp4Download File: https://berlin-ak.ftp.media.ccc.de//congress/2010/webm/27c3-4209-en-zero_sized_heap_allocations_vulnerability_analysis.webm

15

30

00:00

00:00 | 00:00

• None

Use Up/Down Arrow keys to increase or decrease volume.

1.00x

• 2.00x
• 1.50x
• 1.25x
• 1.00x
• 0.75x

• eng 576p (mp4)
• eng 576p (webm)

• 65 min
• 2010-12-29
• 2011-01-03
• 17
• Fahrplan

The dynamic memory allocator is a fundamental component of modern operating systems, and one of the most important sources of security vulnerabilities. In this presentation, we emphasize on a particular weakness of the heap management that has proven to be the root cause of many escalation of privilege bugs in the windows kernel and other critical remote vulnerabilities in user-land applications.

Download

Tags