212 - Attacking VirtualBox and Malicious Chess [Binary Exploitation Podcast]

This week we we've got a neat little printer corruption, a probably unexploitable stockfish bug, though we speculate about exploitation a bit. Then into a VirtualBox escape bug, and an Andreno "vulnerability".

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/212.html

[00:00:00] Introduction
[00:01:31] Spot the Vuln - To Upload or Not To Upload
[00:05:25] The printer goes brrrrr, again!
[00:09:34] [Stockfish] Increase MAX_MOVES to prevent buffer overflow and stack corruption
[00:27:53] Analysis of VirtualBox CVE-2023-21987 and CVE-2023-21991 …

binary binary exploitation bug chess corruption escape exploitation introduction malicious podcast printer virtualbox vuln vulnerability