3 ms·
I've a question. This 0-day is a 0-click that didn't require any document download or anything. Simply visiting a http site would do it. What if you have JavaSc
by account-5 3y ago
I've a question. This 0-day is a 0-click that didn't require any document download or anything. Simply visiting a http site would do it. What if you have JavaScript disabled be default. Would this exploit still work?
- bananapub 3y agoit's http interception so no, I doubt javascript matters at all
- lucb1e 3y agoWithout knowing more, that's a bit of an assumption. The vulnerability could be in image decoding, in which case an <img> tag is enough and no scripting is needed, but it could also very well require doing something funky with JavaScript.
- bananapub 3y agoif it required javascript then it was already an exploit without the mitm
- saagarjha 3y agoNeeding to visit a website makes it a 1-click attack, unless you can do passive redirection.