3 ms·
Be ready to say "playing random video off of the Internet is a bad idea" if someone decided JavaScript has to be gone.
by rfoo 3y ago
Be ready to say "playing random video off of the Internet is a bad idea" if someone decided JavaScript has to be gone.
- Zuiii 3y agoI would have assumed the range of things you could do in video would be limited by codec. Can you provide links that explain how video can achieve similar feats?
- rfoo 3y agoFont: https://developer.apple.com/fonts/TrueType-Reference-Manual/RM05/Chap5.html https://developer.apple.com/fonts/TrueType-Reference-Manual/..., there's a lot of exploits in various implementations about ten years ago: https://security.stackexchange.com/questions/91347/how-can-a-font-be-used-for-privilege-escalation https://security.stackexchange.com/questions/91347/how-can-a.... There's still active ITW exploits in 2023: https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-26369.html https://googleprojectzero.github.io/0days-in-the-wild//0day-... Image: The famous JBIG2. Video: https://en.wikipedia.org/wiki/Stagefright_(bug) https://en.wikipedia.org/wiki/Stagefright_(bug)