VirtualBox E1000 Guest-to-Host Escape

Re:VirtualBox E1000 Guest-to-Host Escape by Nerdfest on Wednesday November 07, 2018 @12:18AM (#18397239)

"The amount they'd be have to pay is at most what a black hat can profit from the bug, which is necessarily less than the real damages because the black hat has to cost for fungibility."

So basically, their value.

[ Parent | on HN ]

Re:VirtualBox E1000 Guest-to-Host Escape by Too on Wednesday November 07, 2018 @12:43AM (#18397318)

I wouldn't put it that way. The potential value lost (reputation, downtime, etc) for the vendor could be more than the value an attacker might gain.

It's not a slice of cake that is exchanging hands. The attacker might only be interested in the cherry on the top but he could also destroy the rest of the cake in the process.

[ Parent | on HN ]