3 ms·
I am not an expert on RCEs whatsoever but my limited knowledge / gut feeling tells me that one works by after a buffer overflow flipping some bits and * invoki
by kmarc 7y ago
I am not an expert on RCEs whatsoever but my limited knowledge / gut feeling tells me that one works by after a buffer overflow flipping some bits and
* invoking syscalls
* using (known) kernel vulnerabilities
* libc bugs
* exploiting buggy posix abstraction, etc.
However, here all platforms seem to be exploited, regardless kernels (darwin/linux/windows), process models, libc implementations etc.
I cannot unthink that this was simply doable because WhatsApp had already have code paths to place and run tasks/processes and this exploit works on this, higher level.