3 ms·
Note this requires attacker to control target process, which means this bypass does not add any new security vulnerabilities nor it gives the process any permis
by theamk 2y ago
Note this requires attacker to control target process, which means this bypass does not add any new security vulnerabilities nor it gives the process any permissions it did not have before. All this does is it makes attacker's life easier - after successful RCE, instead of manually placing code in memory and jumping to it, they can ship the code as ELF file and execute it.