6,264
edits
Changes
→System applets
! Fixed in version
! Fixed in version
! Last version this flaw was checked for
! Last version this flaw was checked for
! Timeframe info related to this was added to wiki
! Timeframe this was discovered
! Timeframe this was discovered
! Discovered by
! Discovered by
| None
| None
| [[10.3.0-28|10.3.0-X]]
| [[10.3.0-28|10.3.0-X]]
|
| May 14, 2015
| May 14, 2015
| [[User:Yellows8|Yellows8]]
| [[User:Yellows8|Yellows8]]
| [[10.2.0-28|10.2.0-X]]
| [[10.2.0-28|10.2.0-X]]
| [[10.2.0-28|10.2.0-X]]
| [[10.2.0-28|10.2.0-X]]
|
| December 22, 2014
| December 22, 2014
| [[User:Yellows8|Yellows8]], [[User:Myria|Myria]] independently (~spring 2015)
| [[User:Yellows8|Yellows8]], [[User:Myria|Myria]] independently (~spring 2015)
| [[10.6.0-31|10.6.0-X]]
| [[10.6.0-31|10.6.0-X]]
| [[10.6.0-31|10.6.0-X]]
| [[10.6.0-31|10.6.0-X]]
|
| January 3, 2015
| January 3, 2015
| [[User:Yellows8|Yellows8]]
| [[User:Yellows8|Yellows8]]
| 2013?
| 2013?
| A lot of people.
| A lot of people.
|-
| [[Internet_Browser|Browser-version-check]] bypass
| When the browser-version-check code runs where the savedata for it was never initialized(such as when the user used the "Initialize savedata" option), it will use base_timestamp=0 instead of the timestamp loaded from savedata. This is then used with "if(cur_timestamp - base_timestamp >= <24h timestamp>){Run browser-version-check HTTPS request code}".
Hence, if the savedata was just initialized, and if the system datetime is set to before January 2, 2000, the browser-version-check will be skipped. This includes January 1, 2000, 00:00, because that's the epoch(timestamp value 0x0) used with this timestamp.
See [http://yls8.mtheall.com/3dsbrowserhax.php here] for bypass usage instructions.
| None
| [[10.6.0-31|10.6.0-X]]
| February 25, 2016
| November 2, 2015 (Exactly one week after the browser version pages were initially updated server-side)
| [[User:Yellows8|Yellows8]]
|}
|}