+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: World News (https://sinister.ly/Forum-World-News)
+--- Thread: 0-days hitting Fedora and Ubuntu open desktops to a world of hurt (/Thread-0-days-hitting-Fedora-and-Ubuntu-open-desktops-to-a-world-of-hurt)
0-days hitting Fedora and Ubuntu open desktops to a world of hurt - roger_smith - 12-17-2016
http://arstechnica.com/security/2016/12/fedora-and-ubuntu-0days-show-that-hacking-desktop-linux-is-now-a-thing/
"If you run a mainstream distribution of Linux on a desktop computer, there's a good chance security researcher Chris Evans can hijack it when you do nothing more than open or even browse a specially crafted music file. And in the event you're running Chrome on the just-released Fedora 25, his code-execution attack works as a classic drive-by.
...
...The two audio files are encoded in the SPC music format used in the Super Nintendo Entertainment System console from the 1990s..."
RE: 0-days hitting Fedora and Ubuntu open desktops to a world of hurt - Inori - 12-17-2016
Arbitrary code execution using SNES-era audio encoding, I'm certainly impressed.
RE: 0-days hitting Fedora and Ubuntu open desktops to a world of hurt - mothered - 12-17-2016
The Linux distro Is the last platform I thought would get hit with a 0-day.
I shall read further Into this.
Appreciate the news, thanks.
RE: 0-days hitting Fedora and Ubuntu open desktops to a world of hurt - Bish0pQ - 12-17-2016
Very interesting, as @mothered said pretty surprised it was found and the way how the 0-day works. Thanks for the article, it was an interesting read for sure.
RE: 0-days hitting Fedora and Ubuntu open desktops to a world of hurt - Esoterith - 12-17-2016
Thanks. I did not know. I need to get back into linux. Im currently using windows because of school.