Remote code execution affecting most iOS/macOS apps

Re:Remote code execution affecting most iOS/macOS apps by diamondo25 on Saturday April 08, 2017 @11:19AM (#14067321)

When this happens, you can override the stack. As variables are pushed on the stack, you can influence the execution of the program, for example return address. This can be exploited using ROP (Return Oriented Programming) and then you've got full control.

[ Parent | on HN ]

Re:Remote code execution affecting most iOS/macOS apps by waynecochran on Saturday April 08, 2017 @11:32AM (#14067401)

This isn't always possible in practice and the article never suggests anything worse than crashing the app or preventing it from running.

[ Parent | on HN ]

Re:Remote code execution affecting most iOS/macOS apps by mark4o on Saturday April 08, 2017 @01:46PM (#14068033)

In https://support.apple.com/en-us/HT207617 Apple admits that this may lead to arbitrary code execution.

[ Parent | on HN ]

Re:Remote code execution affecting most iOS/macOS apps by kenferry on Monday April 10, 2017 @12:53PM (#14080175)

How do you override the stack without writes?

[ Parent | on HN ]