News for hackers. Stuff that matters.

A comment on Remote code execution vulnerability in SQLite. Parent comment

Re:Remote code execution vulnerability in SQLite by testplzignore on Friday December 14, 2018 @05:47PM (#18685610)
Maybe related to https://www.sqlite.org/src/info/8576ccb479fc4b76 ?

Edit: Yes, this is probably it.

[ Parent | on HN ]
Re:Remote code execution vulnerability in SQLite by chx on Friday December 14, 2018 @05:55PM (#18685661)
No way, this commit is Windows only.
[ Parent | on HN ]
Re:Remote code execution vulnerability in SQLite by tedivm on Friday December 14, 2018 @06:00PM (#18685689)
That commit seems to imply that it's a bug when running on Windows, but the Tencent Blade folks have said they've exploited this on Google Home devices. My guess is that this commit is one of many that helped resolve the vulnerability.
[ Parent | on HN ]
Re:Remote code execution vulnerability in SQLite by robocat on Friday December 14, 2018 @07:33PM (#18686204)
"Google Home" is either:

the app installed on your phone to control say a Chromecast,

or a smart speaker.

[ Parent | on HN ]