3 ms·
Okay, but crashing the client isn't the same thing as compromising the client.
by frozenport 11y ago
Okay, but crashing the client isn't the same thing as compromising the client.
- nitrogen 11y agoFrom the linked page describing the bug: > This might be exploitable if the attacker could arrange for UCSWIDE to be in memory somewhere near a sensitive data structure. Crashes are very frequently capable of being exploited, to the point that every crashing bug should be treated as a security vulnerability. At the very least, it's a DoS.