News for hackers. Stuff that matters.

A comment on MS Security Advisory 4022344: RCE in Windows Defender.

Re:MS Security Advisory 4022344: RCE in Windows Defender by modeless on Monday May 08, 2017 @09:25PM (#14297046)
"To be clear, this is an unsandboxed and highly privileged JavaScript interpreter that is used to evaluate untrusted code, by default on all modern Windows systems. This is as surprising as it sounds."

https://bugs.chromium.org/p/project-zero/issues/detail?id=12...

[ Parent | on HN ]
Re:MS Security Advisory 4022344: RCE in Windows Defender by Clownshoesms on Monday May 08, 2017 @10:29PM (#14297330)
Why on earth?? I don't get why the engine would be executing JavaScript, even if it were sandboxed, in the first place? That doesn't sound sensible.
[ Parent | on HN ]