Fuzzing and Overflows in Java Card Smart Cards - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2016

Fuzzing and Overflows in Java Card Smart Cards

Résumé

The Byte Code Verifier (BCV) is one of the most important security element in the Java Card environment. Indeed, embedded applets must be verified prior installation to prevent ill-formed applet loading. At the CARDIS 2015 conference, we disclosed a flaw in the Oracle BCV which affects the applet linking process and can be exploited on real world Java Card smart cards. In this article, we present how this vulnerability had been found and our exploitation of this flaw on a Java Card implementation that enables injecting and executing arbitrary native malicious code in the communication buffer from a verified applet. This attack was evaluated on several Java Card implementations with black box approach. In this case, as we cannot evaluate the effect of the control flow redirection caused by the attack, we develop a generic function which can be executed from any point.
Fichier principal
Vignette du fichier
SSTIC2016-Article-fuzzing_and_overflows_in_java_card_smart_cards-bouffard_lancia.pdf (756.99 Ko) Télécharger le fichier
Origine : Fichiers éditeurs autorisés sur une archive ouverte

Dates et versions

hal-03138856 , version 1 (11-02-2021)

Identifiants

  • HAL Id : hal-03138856 , version 1

Citer

Julien Lancia, Guillaume Bouffard. Fuzzing and Overflows in Java Card Smart Cards. SSTIC, Jun 2016, Rennes, France. ⟨hal-03138856⟩
35 Consultations
118 Téléchargements

Partager

Gmail Facebook X LinkedIn More