4 ms·

% is used in C style format strings, which are famously a source of footguns.

• im3w1l 5y ago
  Primer on how to exploit it https://medium.com/swlh/binary-exploitation-format-string-vulnerabilities-70edd501c5be https://medium.com/swlh/binary-exploitation-format-string-vu...
• terom 5y ago
  That sounds like you would be able to exploit the bug... does it happen to use a libc that implements %n? If so, just include a payload in the title that fixes the bug by patching the code :)
  • BoorishBears 5y ago
    You don't need to exploit it, at least you didn't before... They used to autorun specifically named files on a USB stick. Then some busybody journalists picked up on that and Mazda was forced to lock it down despite the fact that there is complete physical separation from safety systems, and that situations like this article are exactly where it helps.
• CSSer 5y ago
  Although I don't disagree with your thought here and that was actually the podcast host's/other contributor's original hunch too, this wasn't actually an issue with interpolation. I know it sounds bizarre, but the paraphrasing of the podcast hosts and comments from the infotainment system code author suggest that he was treating all strings as percent encoded[0] without any checks or guards in place. Since "% I" isn't a valid character reference, it chokes on it. [0]: https://datatracker.ietf.org/doc/html/rfc3986#section-2.1 https://datatracker.ietf.org/doc/html/rfc3986#section-2.1