[0day] [exploit] Compromising a Linux desktop using. 6502 processor opcodes on the NES?!
Scary Beasts Security
NOVEMBER 14, 2016
The vulnerabilit(ies) 1: Lack of checking ROM size when mapping into 6502 memory and bank switching (Absent a CVE, you can uniquely identify this as CESA-2016-0001.) LDA $02 SEC SBC #$60 STA $02 LDA $03 SBC #$80 STA $03 ; Now, 0x02 contains e.g. 0x1160 ; Shift the most significant byte to get the ROM bank id.
55 
Let's personalize your content