Infosec: Experts warn of null pointer flaws

Infosec Europe 2008

Recently discovered Flash vulnerabilities indicate that 'null pointer' security flaws could quickly evolve into "the next big thing in hacking exploits ".

Security vendor Tier-3 warned that null pointer security flaws are exploitable and could quickly replace buffer overflows as the next big threat.

A 'null pointer' is a link in software code that points to an empty location in computer memory.

• INFOSEC VIDEO: Interview with Ed Gibson, chief security advisor at Microsoft UK

Geoff Sweeney, chief executive at Tier-3, said: "Buffer overflows are still an issue, but they are a problem that has been tackled by the industry for many years.

"Null pointer de-referencing has not received anywhere near the same level of attention, which means that users need to be more vigilant than ever."

Sweeney added that computer users could face problems if a reliable exploit approach for null pointer de-referencing can be harnessed.

Organisations and home users will need to be on alert as their infrastructure is already under constant threat, particularly when the affected software is as pervasive as Adobe's Flash.