2 ms·

Well, I don't know much about Windows and I don't know much about the design of this software, but let's speculate some more. I imagine that on Windows, you hav

Well, I don't know much about Windows and I don't know much about the design of this software, but let's speculate some more. I imagine that on Windows, you have to have escalated permissions to modify the certificate store. I also imagine that if you were writing a piece of software that could do this (i.e. AV), you wouldn't always be running everything as root (so to speak). I would guess that most RCEs wouldn't lead to being able to modify the certifiate store.

tptacek 10y ago
It's kernel code.
- Sir_Cmpwn 10y ago
  Sure. Presumably not all of it is, though. I'm guessing most RCEs for this software don't happen in the kernel. Ring 0 RCE certainly does make the news, I would imagine.
  - tptacek 10y ago
    I'm lost. I literally don't even know what you're arguing about anymore.
    - Sir_Cmpwn 10y ago
      We're arguing? In any case, I'm lost too. Have a good one!