Sancho+

Jajj anyám, még ez is Originally shared by François Simond (supercurio) Android high privileges exploit from Chrome A Chinese security researcher presented an exploit leading to privilege escalation from simple website, through a V8 Javascript VM vulnerability. This is the most critical type of vulnerability you can expect, since a payload can reach millions of users in very little time through a malicious ad, one thing the web appear to have the most difficulty avoiding even on reputable websites. This presentation happened during the Japanse conference named PacSec, from a speaker named Guang Gong. The page https://pacsec.jp/speakers.html lists his intervention as: "Exploiting Heap Corruption due to Integer Overflow in Android libcutils -- Escalate privilege by vulnerabilities in Android system services" Guang Gong, Qihoo 360,@oldfresher How to exploit CVE20151528 to get system_server permission in Android. You can wait until the patch reaches Google Chrome stable at some ...