Sony PlayStation 3 (PS3) Local USB Buffer Overflow Vulnerability

Bugtraq ID:	42944
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Sep 02 2010 12:00AM
Updated:	Sep 02 2010 12:00AM
Credit:	PSJailbreak
Vulnerable:	Sony Playstation 3 2.4.2 Sony Playstation 3 3.41 Sony Playstation 3 0
Not Vulnerable:

Sony PlayStation 3 (PS3) Local USB Buffer Overflow Vulnerability

Sony PlayStation 3 (PS3) is prone to a local buffer-overflow vulnerability because the device fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to jailbreak an affected device and execute arbitrary code using a specially crafted USB dongle. Failed exploit attempts will result in a denial-of-service condition.

Sony PlayStation 3 (PS3) software version 3.41 and prior is vulnerable.

Sony PlayStation 3 (PS3) Local USB Buffer Overflow Vulnerability

Attackers can exploit this issue to create a denial-of-service condition using readily available tools.

Reports indicate this vulnerability is currently being exploited by PSJailbreak and PSGroove to jailbreak PS3 devices.

Sony PlayStation 3 (PS3) Local USB Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sony PlayStation 3 (PS3) Local USB Buffer Overflow Vulnerability

References:

• PlayStation - Homepage (Sony)