4 ms·
No, they must control the server, and with that they can compromise the client. Or at least this is how I understand it.
by Drdrdrq 11y ago
No, they must control the server, and with that they can compromise the client. Or at least this is how I understand it.
- nitrogen 11y agoAn attacker might just need to get something to show up into a log file that is then viewed using PuTTY. Always escape attacker-controlled data before logging or displaying it.
- frozenport 11y agoOkay, but crashing the client isn't the same thing as compromising the client.
- nitrogen 11y agoFrom the linked page describing the bug: > This might be exploitable if the attacker could arrange for UCSWIDE to be in memory somewhere near a sensitive data structure. Crashes are very frequently capable of being exploited, to the point that every crashing bug should be treated as a security vulnerability. At the very least, it's a DoS.