3 ms·
> if anything, a popular feature (videos) is more protected against 0days as there's more eyes on it, not the opposite. It's usually the opposite. The more co
by autoexec 2y ago
> if anything, a popular feature (videos) is more protected against 0days as there's more eyes on it, not the opposite.
It's usually the opposite. The more common something is, the more likely attackers are to target that thing. Adobe acrobat was a prime target for malicious PDF files because it was what everyone used. Once browsers started displaying PDF files attackers turned their attention there.
Ultimately every exploit that gets discovered does result in increased security, as bad code gets patched, but there's no shortage of bad code and even long lived codebases get new flaws discovered all the time.
> what else could a "malicious video file" be, a cognitohazard?
malicious video files usually target whatever software processes them.
Here are some other examples:
https://nvd.nist.gov/vuln/detail/CVE-2023-6351 https://nvd.nist.gov/vuln/detail/CVE-2023-6351
https://nvd.nist.gov/vuln/detail/CVE-2024-13156 https://nvd.nist.gov/vuln/detail/CVE-2024-13156
https://nvd.nist.gov/vuln/detail/CVE-2023-29341 https://nvd.nist.gov/vuln/detail/CVE-2023-29341
https://nvd.nist.gov/vuln/detail/CVE-2023-6879 https://nvd.nist.gov/vuln/detail/CVE-2023-6879
https://nvd.nist.gov/vuln/detail/CVE-2024-57510 https://nvd.nist.gov/vuln/detail/CVE-2024-57510
https://nvd.nist.gov/vuln/detail/CVE-2022-2566 https://nvd.nist.gov/vuln/detail/CVE-2022-2566
https://nvd.nist.gov/vuln/detail/CVE-2020-11184 https://nvd.nist.gov/vuln/detail/CVE-2020-11184