During the time of Jackalope’s release, we were working on the Netop Vision Pro research which runs primarily on Windows, so it was logical to test Jackalope to see if we could discover any new vulnerabilities on Netop Vision Pro. It was built to fill a gap in Windows blackbox fuzzing, which has existed for some time and therefore warranted further investigation. What caught my attention about Jackalope was that it was designed with a blackbox, Windows and MacOS first mentality. Jackalope leverages a library called TinyInst for its code coverage and allows for command line parameters related to code coverage to be passed directly to TinyInst. Jackalope is a coverage-guided fuzzer, meaning it keeps track of code paths during testing and uses that information to guide its future mutations. In late 2020 Google’s Project Zero team released a new fuzzer named Jackalope. There are many different fuzzers on the market, many of them primarily designed to handle open-source projects on Linux. Backgroundįuzzing can be a challenging exercise and just knowing where to start can be cause for confusion. The main emphasis will focus on the process and techniques used during blackbox fuzzing of a Windows DLL. In this blog we will highlight an additional finding: CVE-2021-36134, a vulnerability in the processing of JPEG images, on the Netop Vison Pro version 9.7.2 software. During any vulnerability research project, as we continue to gain a deeper understanding on how a product works, additional threat vectors become apparent which may lead to additional findings this proved once again true during the Netop research.
Netop was very responsive and released several updates to address many of the critical findings, creating a more secure product for our educators and children to use.
#Get netop school 6 not starting software
On March 21 st, 2021, the McAfee Enterprise Advanced Threat Research (ATR) team released several vulnerabilities it discovered in the Netop Vision Pro Education software, a popular schooling software used by more than 9,000 school systems around the world.
0 kommentar(er)
