Re:Million Dollar iOS9 Bug Bounty
by concernedctzn on Monday September 21, 2015 @12:58PM
(#10253552)
Some of those other interesting permissions are the ability to open arbitrary network/bluetooth sockets, read/write to external storage, and access the camera[1].
Mediaserver is not full root but it is pretty privileged. Given all of this access it wouldn't take much work to incorporate another privilege escalation bug to get root on the phone anyway, and there is zero user interaction.
Re:Million Dollar iOS9 Bug Bounty
by soisses on Monday September 21, 2015 @01:29PM
(#10253768)
There isn't much in the list that applications like Hangout or Chrome don't have anyway. It's still a very serious vulnerability, but the overstating is just clever marketing by a security company.
Mediaserver is not full root but it is pretty privileged. Given all of this access it wouldn't take much work to incorporate another privilege escalation bug to get root on the phone anyway, and there is zero user interaction.
[1] https://www.blackhat.com/docs/us-15/materials/us-15-Drake-St...