|
Exploit code demonstrating a memory corruption bug in Microsoft's Edge web browser has been published today by the researcher that discovered and reported the vulnerability in the first place. The code can lead to remote code execution on unpatched machines. The security bug affects Chakra, the JavaScript engine powering Edge, in a way that could allow an attacker to run on the machine arbitrary code with the same privileges as the logged user. Reported by Bruno Keith of the phoenhex team of vulnerability researchers, the flaw has been marked as having a critical impact by Microsoft on most operating systems it affects. The only systems where it has 'moderate' severity are Windows server editions 2019 and 2016. The proof-of-concept code has 71 lines and results in an out-of-bounds (OOB) memory read leak; the effect may not appear that damaging but an attacker can modify the demo exploit to achieve a more harmful outcome. "Chakra failed to insert value compensation which causes the headSegmentsym to be reloaded but not the headSegmentLength sym, we, therefore, accessed the new buffer with the wrong length checked," explains a comment in the demo code. For more turn to OUR FORUM. Everyone by now is familiar with the specific kind of partisan rage that manifests on Facebook, particularly with the kind of tailored memes meant to incite political outrage that finds a home on its platform. But according to a report from the Wall Street Journal, Facebook mulled a tool meant to facilitate greater tolerance among those with opposing political beliefs before it was reportedly stalled by Facebook’s Vice President of Global Public Policy Joel Kaplan. Citing sources familiar with the matter, the Journal reported Sunday that Kaplan, who memorably pissed off Facebook staff after supporting Brett Kavanaugh, objected to the so-called called “Common Ground” project over concerns that the endeavor would prompt allegations of political bias against conservatives. The project “involved several potential products meant to minimize toxic content and encourage more civil discussion,” per the Journal: The Wall Street Journal writes read more on our Forum Chinese IT giant Huawei has reportedly found itself in the cross hairs of the Western intelligence network that is seeking to curb its growth. Speaking to Sputnik, academics explained their scepticism over the alleged security threat posed by Chinese high-tech companies. |
Latest Articles
|


