Submission + - Remote malware injection via flaw in network card (ssi.gouv.fr) 1
kfz-versicherung writes: "During the CanSecWest international conference in Vancouver members of ANSSI described how an attacker could be able to exploit a flaw to run arbitrary code inside some network controllers. The attack uses routable packets delivered to the victim’s NIC. Consequently, multiple attacks can be conducted including: Man in The Middle attacks on network connections, access to cryptographic keys on the host platform, or malware injection on the victim’s computer host platform. Link to the full presentation (pdf)"