News for hackers. Stuff that matters.

A comment on Remote code execution vulnerability in SQLite. Parent comment

Re:Remote code execution vulnerability in SQLite by eli on Friday December 14, 2018 @08:44PM (#18686500)
Sure, but I very frequently parse PDFs and JPEGs from untrusted sources, but almost never open untrusted .sqlite files.

(This is still a serious security vulnerability)

[ Parent | on HN ]
Re:Remote code execution vulnerability in SQLite by tptacek on Friday December 14, 2018 @08:45PM (#18686503)
It's an RCE in Chrome.
[ Parent | on HN ]
Re:Remote code execution vulnerability in SQLite by eli on Friday December 14, 2018 @08:46PM (#18686512)
Ok I see your point
[ Parent | on HN ]
Re:Remote code execution vulnerability in SQLite by armitron on Friday December 14, 2018 @09:29PM (#18686674)
Risk is transitive.
[ Parent | on HN ]
Re:Remote code execution vulnerability in SQLite by pedrocr on Saturday December 15, 2018 @09:15AM (#18688451)
> but almost never open untrusted .sqlite files

You may not notice that you do when apps use sqlite as their file format:

https://www.sqlite.org/appfileformat.html

[ Parent | on HN ]