Hacker News new | ask | show | jobs
by manas2004 4838 days ago
The way this code looks, it opened up a backdoor into the app to load any code embedded in the image, and execute it with the app's credentials - including access to app's in memory data. Major security hole for an enterprise app given that this could be used to override assembly signing. Just change the image, and the app would load and run any code embedded in that background image!
1 comments

Yes the image was embedded as a resource IIRC and the assembly signed (enterprise app)
Oh ok - good that the image was not picked up from a path in the install folder. I thought that was the case! That would have been bad.