3 ms·
Possibly through a ROP chain. Abusing VLC's code itself. You don't need memory that's writeable and executable for that. Check the Wikipedia link in my comment
by vardump 7y ago
Possibly through a ROP chain. Abusing VLC's code itself. You don't need memory that's writeable and executable for that. Check the Wikipedia link in my comment about ROP exploits.
- gubbrora 7y agoJust elaborating on this. One way of looking at it is that we turn the attacked program into an interpreter thus bypassing the requirement for executability. It turns out that a lot of programs can be tricked into interpreting a family of languages called rop chains.