5 ms·
If you can execute code, said code could be an auto-installer. If there's a vulnerability in the application used to open a JPEG or whatever, you can execute c
by brigade 14y ago
If you can execute code, said code could be an auto-installer.
If there's a vulnerability in the application used to open a JPEG or whatever, you can execute code.
It's less asking "is this dangerous?" and more "did you download and open this?"
- chc 14y agoIf something else downloaded and opened the file, it's already owned your account, hasn't it? The horses are out of the barn at that point, right?
- brigade 14y agoThere are 3 steps needed to exploit this attack vector (assuming no wetware exploits): 1. Download the file. Any website can do this by design. 2. Get LaunchServices to open the file. This requires at least one vulnerability. 3. Bypass quarantine. This requires at least one additional vulnerability.