Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

They aren't remote code execution exploits as best as I can tell. But, it's a short leap from an exploitable root escalation to total compromise of a machine. Until these are patched, any executable you download and run could potentially be a dropper for much nastier stuff. You could combine one of these with the recently-disclosed Flash exploits, for example, and you have a drive-by root exploit ready for deployment via ad networks to millions of people.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: