News for hackers. Stuff that matters.

A comment on YouTube removes all_comments feature. Parent comment

Re:YouTube removes all_comments feature by pmontra on Sunday February 07, 2016 @01:34PM (#11054040)
An example of a vulnerability of an even older version of Opera for Windows, that let an attacker totally own the client computer: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-13...

"Large values in the HTTP Content-Length header can cause Opera to crash. Certain specific values can cause a memory corruption, which in some cases can allow arbitrary code to be injected and executed. In most cases Opera will just crash. To inject code, additional techniques will have to be employed."

More details in the pages linked to the URL I provided.

[ Parent | on HN ]
Re:YouTube removes all_comments feature by JohnTHaller on Sunday February 07, 2016 @03:50PM (#11054759)
And overflows in the image handlers which crop up every now and then. Anyone that thinks they are secure using an outdated and insecure browser by disabling JavaScript doesn't understand security's complexities when dealing with something like a browser.
[ Parent | on HN ]