<story><title>CVE-2021-32471 – Input validation in Marvin Minsky 1967 Turing Machine</title><url>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32471</url></story><parent_chain></parent_chain><comment><author>segfaultbuserr</author><text>A better link is the research paper:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;arxiv.org&amp;#x2F;abs&amp;#x2F;2105.02124&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;arxiv.org&amp;#x2F;abs&amp;#x2F;2105.02124&lt;/a&gt;&lt;p&gt;&amp;gt; The universal Turing machine is generally considered to be the simplest, most abstract model of a computer. This paper reports on the discovery of an accidental arbitrary code execution vulnerability in Marvin Minsky&amp;#x27;s 1967 implementation of the universal Turing machine. By submitting crafted data, the machine may be coerced into executing user-provided code. The article presents the discovered vulnerability in detail and discusses its potential implications. To the best of our knowledge, an arbitrary code execution vulnerability has not previously been reported for such a simple system.&lt;p&gt;&amp;gt; A common strategy for understanding a problem is to reduce it to its minimal form. In the field of computer security,we may ask the question: &amp;quot;What is the simplest system exploitable to arbitrary code execution?&amp;quot; In this article, we pro-pose an answer to that question by reporting on the discovery that a well-established implementation of the universal Turing machine is vulnerable to a both unintentional and non-trivial form of arbitrary code execution.</text></comment>
<story><title>CVE-2021-32471 – Input validation in Marvin Minsky 1967 Turing Machine</title><url>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32471</url></story><parent_chain></parent_chain><comment><author>avibhu</author><text>&amp;gt; NOTE: the discoverer states &amp;quot;this vulnerability has no real-world implications.&amp;quot;&lt;p&gt;Not sure if declaring this is standard practice, but I had a good laugh.</text></comment>