News for hackers. Stuff that matters.

A comment on Remote code execution affecting most iOS/macOS apps.

Re:Remote code execution affecting most iOS/macOS apps by kenferry on Saturday April 08, 2017 @11:03AM (#14067232)
Anyone know how this is bootstrapped to code execution? In the part written up, seems to get as far as “data reads past the end of a buffer”.
[ Parent | on HN ]
Re:Remote code execution affecting most iOS/macOS apps by diamondo25 on Saturday April 08, 2017 @11:19AM (#14067321)
When this happens, you can override the stack. As variables are pushed on the stack, you can influence the execution of the program, for example return address. This can be exploited using ROP (Return Oriented Programming) and then you've got full control.
[ Parent | on HN ]
Re:Remote code execution affecting most iOS/macOS apps by waynecochran on Saturday April 08, 2017 @11:32AM (#14067401)
This isn't always possible in practice and the article never suggests anything worse than crashing the app or preventing it from running.
[ Parent | on HN ]
Re:Remote code execution affecting most iOS/macOS apps by mark4o on Saturday April 08, 2017 @01:46PM (#14068033)
In https://support.apple.com/en-us/HT207617 Apple admits that this may lead to arbitrary code execution.
[ Parent | on HN ]
Re:Remote code execution affecting most iOS/macOS apps by kenferry on Monday April 10, 2017 @12:53PM (#14080175)
How do you override the stack without writes?
[ Parent | on HN ]