The universal Turing machine is generally considered to be the simplest, most abstract model of a computer. This paper reports on the discovery of an accidental arbitrary code execution vulnerability in Marvin Minsky's 1967 implementation of the universal Turing machine. By submitting crafted data, the machine may be coerced into executing user-provided code. The article presents the discovered vulnerability in detail and discusses its potential implications. To the best of our knowledge, an arbitrary code execution vulnerability has not previously been reported for such a simple system.
翻译:普世图灵机器一般被认为是计算机最简单、最抽象的模型。本文报告了在马文·明斯克1967年实施通用图灵机器时发现意外任意代码执行弱点的情况。通过提交人工制作的数据,机器可能被迫执行用户提供的代码。文章详细介绍了发现的脆弱性并讨论了其潜在影响。据我们所知,以前没有报告过这种简单系统的任意代码执行弱点。