Chrome 0-day exploit used in Operation WizardOpium

Re:Chrome 0-day exploit used in Operation WizardOpium by dstaley on Saturday November 02, 2019 @02:52AM (#21426264)

I wonder if this exploit would be possible if Chrome was packaged using the UWP Desktop Bridge on Windows 10. I doubt the sandbox prevents UAF, but surely it would have prevented executing an EXE file.

[ Parent | on HN ]

Re:Chrome 0-day exploit used in Operation WizardOpium by panpanna on Saturday November 02, 2019 @04:20AM (#21426501)

I wonder the same thing with Linux contained executables, such as snap.

(not sure if chrome is available as an official snap)

[ Parent | on HN ]

Re:Chrome 0-day exploit used in Operation WizardOpium by dstaley on Saturday November 02, 2019 @04:22AM (#21426511)

It's my understanding that this particular exploit only targeted Windows, but the underlying UAF vulnerability affected all Chrome variants.

[ Parent | on HN ]

Re:Chrome 0-day exploit used in Operation WizardOpium by ChrisSD on Saturday November 02, 2019 @08:03AM (#21427161)

Desktop Bridge applications aren't sandboxed.

[ Parent | on HN ]

Re:Chrome 0-day exploit used in Operation WizardOpium by dstaley on Saturday November 02, 2019 @03:25PM (#21429488)

Ah so it seems. The webpage for Desktop Bridge says that it features "no malware injection", so I took that to mean it was sandboxed.

[ Parent | on HN ]