Sony Playstation 3 Internet Browser Multiple Denial Of Service Vulnerabilities

Bugtraq ID:	24203
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 29 2007 12:00AM
Updated:	May 30 2007 12:03AM
Credit:	Anathema is credited with the discovery of these issues.
Vulnerable:	Sony Playstation 3 0
Not Vulnerable:

Sony Playstation 3 Internet Browser Multiple Denial Of Service Vulnerabilities

Sony Playstation 3 is prone to multiple denial-of-service vulnerabilities because its browser fails to adequately handle user-supplied data.

An attacker can exploit this issue by exhausting memory resources to cause the browser to become unresponsive or to crash the device.

Sony Playstation 3 Internet Browser Multiple Denial Of Service Vulnerabilities

To exploit these issues, an attacker must entice an unsuspecting user to view a maliciously crafted webpage.

Proof-of-concept webpages have been made available; please see the references for more information.

Sony Playstation 3 Internet Browser Multiple Denial Of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Sony Playstation 3 Internet Browser Multiple Denial Of Service Vulnerabilities

References:

• Playstation Homepage (Sony)
  
• Proof-of-concept Links Webpage (Anathema)
  
• PS3 Denial of Service and also Buffer error (Anathema)
  
• PS3 Possible Exploits (Anathema)