206 - A Ghostscript RCE and a Windows Registry Bug [Binary Exploitation Podcast]

This week's binary exploitation episode has some pretty solid bugs.A string escaping routine that goes out of bounds, a web-based information disclosure. And a couple kernel issues, one in the Windows registry, a logical bug leading to memory corruption, and an AppleSPU out of bounds access.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/206.html

[00:00:00] Introduction
[00:00:30] Reversing the AMD Secure Processor (PSP) - Part 1: Design and Overview
[00:01:15] Spot the Vuln - Left-over Spaces
[00:05:03] …

access amd binary binary exploitation bug bugs corruption cve design disclosure exploitation ghost ghostscript information information disclosure introduction kernel memory memory corruption podcast processor rce registry reversing shell solid vuln web windows writeup