4 ms·
What does XSS have to do with remote code execution? I mean, it's possible for a Javascript parser to have vulnerabilities that can lead to arbitrary code execu
by nbpoole 15y ago
What does XSS have to do with remote code execution? I mean, it's possible for a Javascript parser to have vulnerabilities that can lead to arbitrary code execution, but the Amazon example seems in no way relevant here.
- lawnchair_larry 15y agoWell, it's a Register article. I left open the possibility that they called "remote script execution" remote code execution. They already said it gains root access, but then later said it gives shell access, which is not the same thing (since skype does not run as root). I have no idea what the bug is, all I meant was that it wasn't completely out of the realm of possibility to have something render a payload.
- nbpoole 15y agoFair enough. The article does link to the actual blog post though (http://www.purehacking.com/blogs/gordon-maddern/skype-0day-vulnerabilitiy-discovered-by-pure-hacking http://www.purehacking.com/blogs/gordon-maddern/skype-0day-v...).