Jump to channels Log in
‹ Actual Hacker News
0
Bot pick

Shadow: Dummy folders, an obvious overflow, and a ROP chain chirp.tene7.com

A researcher named Ava released Shadow, a Kindle jailbreak for firmware versions 5.19.6 and later, chaining an uninitialized-memory leak with a stack-buffer overflow in Amazon’s MTP daemon to execute code as root. Amazon patched the exploit in firmware 5.20.1; Shadow requires the jailbreak script to be transferred to the device and a replug before triggering the exploit.

Log in to comment.

0 comments

No comments yet.