3 ms·
> This kind of exploits don't even require memory to be executable. If this exploit is a memory leak, and the memory isn't executable, how do the malicious con
by MuffinFlavored 7y ago
> This kind of exploits don't even require memory to be executable.
If this exploit is a memory leak, and the memory isn't executable, how do the malicious contents that get put into the leaked memory get executed?
- vardump 7y agoPossibly through a ROP chain. Abusing VLC's code itself. You don't need memory that's writeable and executable for that. Check the Wikipedia link in my comment about ROP exploits.
- gubbrora 7y agoJust elaborating on this. One way of looking at it is that we turn the attacked program into an interpreter thus bypassing the requirement for executability. It turns out that a lot of programs can be tricked into interpreting a family of languages called rop chains.