Classic Vulnerabilities

Explore the rich history of native exploitation and classic vulnerabilities in this NDC Security 2022 conference talk by Patricia Aas. Delve into decades-old vulnerabilities and exploitation techniques that continue to surface in recent years. Learn how modern tooling equips us to find and fix these "classic" vulnerabilities. Examine specific examples from the past, including memory allocation issues, Android IPC vulnerabilities, and use-after-free exploits. Discover how undefined behavior and compiler optimizations can lead to security risks. Gain insights into recent CVEs and their connections to long-standing security challenges. Understand the importance of cross-pollination in security knowledge and the ongoing relevance of heap overflow vulnerabilities in today's software landscape.