Cody Pierce

Security Researcher
Cody Pierce, aka intropy, is a researcher within TippingPoint's security research group. His responsibilities include reverse engineering and developing auditing and reverse engineering automation tools. Cody has discovered critical vulnerabilities affecting a wide range of enterprise vendors, including: Microsoft, Hewlett-Packard, America Online, Computer Associates and others. Prior to TippingPoint, Cody was a security researcher for Citadel Security Software responsible for vulnerability analysis, research, and remediation. Though he spends much of his personal and free time in the world of a reverse engineer, Cody's true passion is music.
- Published Advisories:
- TPTI-08-03: Microsoft Excel Rich Text Memory Corruption Vulnerability
- TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability
- TPTI-08-01: Apple Quicktime Image File IDSC Atom Memory Corruption Vulnerability
- TPTI-07-20: Apple Quicktime Movie Stack Overflow Vulnerability
- TPTI-07-14: HP OpenView Multiple Product Shared Trace Service Stack Overflow Vulnerabilities
- TPTI-07-13: Borland Interbase ibserver.exe Create-Request Buffer Overflow Vulnerability
- TPTI-07-11: Multiple Vendor SQL fbserver 'connect' Buffer Overflow Vulnerability
- TPTI-07-10: Centennial Software XFERWAN Stack Overflow Vulnerability
- TPTI-07-03: America Online SuperBuddy ActiveX Control Code Execution Vulnerability
- TPTI-06-08: Microsoft Internet Help COM Object Memory Corruption Vulnerability
- TPTI-06-09: Microsoft DirectAnimation COM Object Memory Corruption Vulnerability
- TPTI-06-03: eIQnetworks ESA Syslog Server Buffer Overflow Vulnerabilities
- TPTI-06-04: eIQnetworks ESA Topology Server Buffer Overflow Vulnerability
- Upcoming Advisories:
- Microsoft (185 days since report)
- Appearances:
- RPC Auditing Tools and Techniques
2007-11-22 DeepSec In-Depth Security Conference- RPC Auditing Tools and Techniques
- PyEmu: A Multi-Purpose Scriptable x86 Emulator
2007-08-02 BlackHat US- PyEmu: A Multi-Purpose Scriptable x86 Emulator
- Blog Entries
- Owning Kraken Zombies, a Detailed Dissection
created 2008-04-28 (2 comments, 7247 views)- Owning Kraken Zombies, a Detailed Dissection
- MSRPC NDR Types Technical Overview
created 2007-11-24 (0 comments, 2023 views)- MSRPC NDR Types Technical Overview
- Step by Step of How TPTI-07-013 was Discovered
created 2007-07-24 (5 comments, 5704 views)- Step by Step of How TPTI-07-013 was Discovered
