Re:On VBScript
by wglb on Wednesday December 19, 2018 @07:49PM
(#18721528)
One interesting bit: If an attacker-controlled data is interpreted as a VBScript variable, this can result in a lot more than just infoleak and can easily be converted into a code execution. This issue is a good example of why, in general, an out-of-bounds read can be more than an infoleak: it always depends on precisely what kind of data is being read and how it is used.
How leaks can become RCE.