Urgent.News

What's breaking now, across thousands of outlets.

Tech

Shadow: Dummy folders, an obvious overflow, and a ROP chain

The article discusses a complex jailbreak technique for the Kindle e-reader device. It explains how the Media Transfer Protocol (MTP) is used to transfer files between the device and other devices, and how this protocol can be exploited to execute arbitrary code on the device. The jailbreak is named "Shadow" because it was in development for a long time and was eventually patched, but the author decided to release it due to its novelty and the availability of alternative jailbreak options.

The article details the specific vulnerabilities in the MTP implementation that were used to execute the exploit, including a memory leak bug in the MTP library and a stack buffer overflow vulnerability. The author also describes how these vulnerabilities are chained together to create a successful exploit.

Written by urgent.news from Lobsters's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at chirp.tene7.com →

More in Tech

More from Monday 26 October →