168 - Exploiting Undefined Behavior and a Chrome UAF [Binary Exploitation Podcast]

Is the compiler make exploitation easier, these divergent representations seem to do so. We also look at a chrome UAF and a double stack overflow.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/168.html

[00:00:00] Introduction
[00:00:52] Spot the Vuln - The Right Start
[00:03:25] Look out! Divergent representations are everywhere!
[00:12:18] Chrome: heap-use-after-free in password_manager::WellKnownChangePasswordState::SetChangePasswordResponseCode
[00:17:34] Netgear Nighthawk r7000p aws_json Unauthenticated Double Stack Overflow Vulnerability
[00:23:52] A validation flaw in Netfilter leading to Local Privilege Escalation [CVE-2022-1015] …

binary binary exploitation chrome exploitation exploiting podcast uaf