There have been reports of a new image viewing vulnerability in Sony PSP devices, to be more precise the vulnerabilty is caused by an error in LibTiff and can be exploited to execute arbitrary code when a maliciously crafted TIFF image is viewed in the Photo Viewer.

Apparently a team of people have been busy developing a PoC for this on Sony PSP’s since the release of the new Proof-of-concept TIFF vulnerability. The Hello World Demo which can be downloaded here runs on all PSP devices that are capable of viewing TIFF images. This proves that it is quite possible to run code via this exploit so we’d better keep a look out for this. With the current popularity of the Sony Playstation Portable, it might not take long before someone tries to exploit this vulnerablity. So to all PSP users out there, it would be best not to view images that come from untrusted sources.

In case you guys are interested in a few more writeups we’ve done on Sony in the past few months, Check out these articles:

• Sony Uninstaller prone to exploit
  
• Malware Exploiting Sony’s Rootkit DRM
  
• First PSP Trojan