jailbreaks
</li>
<li>Android Master Key
</li>
</ul>

</section>
<section id="sec-6-1" >

<h3>Case Study</h3>
<ul class="org-ul">
<li>15 .ZIP CVE's in the last 3 years
<ul class="org-ul">
<li>11 memory corruption bugs
<ul class="org-ul">
<li>Risky pointer manipulation
</li>
<li>Mitigation: ASLR, safer languages, &#x2026;
</li>
</ul>
</li>
<li>4 parser ambiguities
<ul class="org-ul">
<li>Same data interpreted differently
<ul class="org-ul">
<li>Master Key: Java and C ZIP parser
</li>
</ul>
</li>
</ul>
</li>
<