4 ms·
They mention the example of browsing to a web page. Not quite a fully fledged remote execution bug but close enough. I think what they're really saying is they'
by JaRail 8y ago
They mention the example of browsing to a web page. Not quite a fully fledged remote execution bug but close enough. I think what they're really saying is they're aware of remote execution cases. An example of that might be a web services that's backed by a SQLite query.
- 21 8y agoJavaScript code has access to SQLite. So any webpage where the attacker controls/can inject JavaScript is vulnerable.
- blattimwind 8y agoFirefox has never supported WebSQL...
- tptacek 8y agoDrive-by code execution from a page in a web browser is almost the textbook example of "RCE" in its modern sense.
- GalacticDomin8r 8y agoYeah, of the browser or plugin. SQLite is neither although does have a local exploit.