DSiWare VulnList: Difference between revisions

dsiwarehax is dead /w 1.4.2, vulnlist is over.
m move frogger to finished section since there's no payload space.
Line 22: Line 22:
|-
|-
|  Incomplete
|  Incomplete
21
20
|-
|-
|  Done
|  Done
17
18
|-
|-
|  DSiWare which probably aren't exploitable
|  DSiWare which probably aren't exploitable
Line 110: Line 110:
|  Started
|  Started
|  The xml .plist the game uses for storing savedata contains high-scores strings.
|  The xml .plist the game uses for storing savedata contains high-scores strings.
|-
|  Frogger Returns
|  High-Scores
|  Started
|  Has ASCII high-scores.
|-
|-
|  Guitar Rock Tour
|  Guitar Rock Tour
Line 200: Line 195:
|  None
|  None
|  Has high-scores without names, scores are ASCII null-terminated strings. Managed to semi-crash this, but system reset still worked so this probably isn't exploitable.
|  Has high-scores without names, scores are ASCII null-terminated strings. Managed to semi-crash this, but system reset still worked so this probably isn't exploitable.
|-
|  Frogger Returns
|  High-Scores
|  Has ASCII high-scores. strcpys to a static buffer from savedata, unknown if this is exploitable but there's only <10KB free space available(way too low for a payload) so meh.
|-
|-
|  Mario Calculator
|  Mario Calculator