Hacker News new | ask | show | jobs
by est31 1434 days ago
Getting into the process that does the message parsing is only the first step in a full exploit chain. Usually processes, even the unprivileged ones, have direct access to the kernel. So if there is a bug in there for example, you can exploit the kernel as a second step. Alternatively, you exploit a bug in the IPC interface with the messaging app. Etc.