News for hackers. Stuff that matters.

A comment on Zero-click, wormable, cross-platform remote code execution in Microsoft Teams. Parent comment

Re:Zero-click, wormable, cross-platform remote code executio... by freeone3000 on Monday December 07, 2020 @03:39PM (#25337161)
It's in the IPC invocation, so for this app in particular, it'd be in the exact same place.
[ Parent | on HN ]
Re:Zero-click, wormable, cross-platform remote code executio... by jcelerier on Monday December 07, 2020 @04:12PM (#25337607)
I have a hard time seeing how. It seems to work by having some JS code to create a webview getting executed. In a pure C++ app there would be no place that would even be able to interpret that js, or any other "script language" in that pipeline.
[ Parent | on HN ]