Remote code execution vulnerability in SQLite

Re:Remote code execution vulnerability in SQLite by ATsch on Friday December 14, 2018 @09:02PM (#18686573)

I think the reverse definition is just as silly... Calling a JPEG parser vulnerability an RCE just because some online service is using it in a way that can be exploited remotely. By that definition, any bug is an RCE, since I can just set up a web server to run that program.

I think a better way of looking at it is that it's an ACE Vulnerability in the e.g. JPEG parser that causes an RCE in the Online Service.

Or, in this case, an ACE vulnerability in SQLite that causes an RCE in Chromium.

[ Parent | on HN ]

Re:Remote code execution vulnerability in SQLite by tptacek on Friday December 14, 2018 @11:34PM (#18687046)

Sure, though what I'd say is silly is epistemological conceit of trying to pin down vulnerabilities as "remote" or "local". A lot of vulnerability research terms are silly (sillier than RCE). Either way: it's a "term of art", and it means what it means, and this is a clear and obvious instance of an RCE.

[ Parent | on HN ]