Gathering magic: Libtiff Exploit for Firmware 5.50 found.

[DarkFoxSniper]

Source:QJ

Jackpot! Once exploit fever hits, it washes over everyone completely and utterly. Following the ChickHEN 5.03 exploit from the other day, PSP homebrew developer wololo of Wagic: The Gathering fame has now found a Libtiff Exploit for FW 5.50!

Want proof? Here, we'll give you not just one, but two videos showing wololo's exploit crash in action:

+ YouTube Video

+ YouTube Video

If you guys want to try out the exploit for yourselves, just download the archive from below.

Download

*UPDATE

*Update* If you, like some of us, were also wondering why wololo didn't post this on his Wagic blog, then get this: the exploit/crash file isn't really his. From his website, here's his official statement to clarify the matter (emphasis by wololo):

I saw today a buzz on various websites about a youtube video showing a tiff file crashing OFW 5.50, apparently a file created by me.


I am not directly related to this video.


I haven’t looked at the file yet, but it is possible that this is an OLD file I created a while ago and which has proven to be unexploitable beyond firmware 4.20. See here and here (note how old these posts are)


There is also a possibility that someone else found a crash and decided to use my name in the file for some reason, but I find this highly unlikely.


So my official statement right now is the following: Not a fake, not an exploit, just a crash

[iPenguin2]

Kewl
/filluh

[J0EY]

wololo has denied any link to this exploit/crash

Originally Posted by wololo

I saw today a buzz on various websites about a youtube video showing a tiff file crashing OFW 5.50, apparently a file created by me.

I am not directly related to this video.

I haven’t looked at the file yet, but it is possible that this is an OLD file I created a while ago and which has proven to be unexploitable beyond firmware 4.20. See here and here (note how old these posts are)

There is also a possibility that someone else found a crash and decided to use my name in the file for some reason, but I find this highly unlikely.

So my official statement right now is the following: Not a fake, not an exploit, just a crash

Source - Post by wololo on his blog

.

[iPenguin2]

Don't double post, u should know that

Hmm, why would someone set him up?

[J0EY]

maybe he thot his work would get more credit if people thought it was from a pro developer like wololo

[RocketMan291]

cool, i didn't realize someone already posted this.