Assuming you're talking about a heap buffer overrun, it's still possible to expl... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

JohnLeitch 5 months ago | parent | context | favorite | on: OpenSSL: Stack buffer overflow in CMS AuthEnvelope...

Assuming you're talking about a heap buffer overrun, it's still possible to exploit for EoP in some cases.

nly 5 months ago | [–]

No, I mean you'd just allocate a tonne of memory

JohnLeitch 5 months ago | | [–]

Ah, okay. Thought you were talking about OOB heap write or something.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact