RCE exploit for the latest Safari

#1

Post by nbsd4life » Thu, Dec 06, 2018, 9:23 PM UTC

RCE exploit for the latest Safari
github.com

Re: RCE exploit for the latest Safari

#2

Post by hamandcheese » Thu, Dec 06, 2018, 10:28 PM UTC

It’s unclear from the description, does this break sandboxing? Otherwise, how is this any more dangerous than running javascript at all?

Re: RCE exploit for the latest Safari

#3

Post by dictum » Thu, Dec 06, 2018, 10:37 PM UTC

Can content blockers block wasm? Can't find a related defaults flag, but even then, it would apply to all sites. I'm thinking of something more fine-grained.

(It's awful that Apple has made it impossible to create something like uBlock Origin for Safari, and it will eventually stop working)

Re: RCE exploit for the latest Safari

#4

Post by Thibaut1 » Thu, Dec 06, 2018, 10:46 PM UTC

apple released the fix just 6 hours back

Re: RCE exploit for the latest Safari

#5

Post by ccnafr » Thu, Dec 06, 2018, 11:08 PM UTC

Thibaut1 wrote: post #4

apple released the fix just 6 hours back

Any public link to the fix/announcement?

Re: RCE exploit for the latest Safari

#6

Post by [deleted] » Thu, Dec 06, 2018, 11:10 PM UTC

ccnafr wrote: post #5

Thibaut1 wrote: post #4

apple released the fix just 6 hours back

Any public link to the fix/announcement?

[deleted]