4 ms·
I guess it would not work as an MSI but would be fine as a JAR. As far as I can remember, jar is zip and zip has headers at the end of files. Making it possibl
by eknkc 6y ago
I guess it would not work as an MSI but would be fine as a JAR.
As far as I can remember, jar is zip and zip has headers at the end of files. Making it possible to append a jar to something and disregard the first part. In this case a signed MSI.
And so you have a code signed JAR from Microsoft. Then what? I don’t know.
- ComodoHacker 6y agoIt would work as an MSI, as MSI files are read from the start.
- Xylakant 6y agoHowever, from the description, it would not execute the payload as an msi either - the appended garbage would just be ignored from the installers perspective.
- ComodoHacker 6y agoJRE would execute the payload.
- jojobas 6y agoIt wouldn't, unless there's already a different exploit to do so.
- deleted 6y ago[deleted]