Summer @ Trail of Bits

Summary: A high school intern at Trail of Bits spent the summer fuzzing VLC, Wireshark, and ImageMagick with AFL and Microsoft MiniFuzz, and traced a VLC crash to a type confusion in QuickTime container box parsing that frees two user-controlled pointers. The bug was reported through oCERT and assigned CVE-2015-5949, after which the intern moved to web security work and a security assessment of a New York City tech startup.
Key Takeaway: A file-parsing type confusion that hands an attacker control of two freed addresses is plausibly exploitable, and it was found by a high school intern in a media player millions of people run.

Read the original at Trail of Bits Blog ↗

Mentions: CVE-2015-5949