Applying Return Oriented and Jump Oriented Programming Exploitation Techniques with Heap Spraying
Acta Polytechnica Hungarica · 2015
Memory corruption vulnerabilities are one of the most dangerous types of software errors.By exploiting such vulnerabilities the malicious attackers can force the operating system to run arbitrary code on the system.The understanding and the research of memory corruption exploitation methods are crucial in order to improve detection and promote protection techniques.This study analyses the return oriented and the jump oriented exploitation methods combined with heap spray payload delivery technique.According to our knowledge this combination of memory exploitation has never been analysed before.By creating proof of concept exploits for CVE-2007-0038 it is shown, that combining return oriented and jump oriented programming with heap spray payload delivery gives new perspectives to attackers.These unique exploitation techniques possess almost all favourable characteristics of the combined techniques together such as almost unlimited payload size or bypassing data execution prevention without changing memory page protections.