'Next big IT security threat,' says security firm
vnunet.com, 21 Apr 2008
Recently discovered Flash vulnerabilities indicate that 'null pointer' security flaws could quickly evolve into "the next big thing in hacking exploits ".
Security vendor Tier-3 warned that null pointer security flaws are exploitable and could quickly replace buffer overflows as the next big threat.
A 'null pointer' is a link in software code that points to an empty location in computer memory.
Geoff Sweeney, chief executive at Tier-3, said: "Buffer overflows are still an issue, but they are a problem that has been tackled by the industry for many years.
"Null pointer de-referencing has not received anywhere near the same level of attention, which means that users need to be more vigilant than ever."
Sweeney added that computer users could face problems if a reliable exploit approach for null pointer de-referencing can be harnessed.
Users need to be more vigilant than ever
Geoff Sweeney Tier-3
Organisations and home users will need to be on alert as their infrastructure is already under constant threat, particularly when the affected software is as pervasive as Adobe's Flash.
Infosec 2008 Preview: Ed Gibson, Chief Security Advisor at Microsoft UK, talks to vnunet.com about the security focus for the coming year.
The latest news and views from Europe's number one information security event
Retailers fighting an ever increasing threat
Hacking fades in favour of theft
First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1
Surviving veterans of the code-breaking facility to receive badge of...
Telco begins major rollout in 69 locations across the UK
Do you agree?
Have your say on this article