Adventures in Remote Code Execution and Zip File Vulns — from Samsung and Vungle to ZipperDown
Description
As with all things mobile, there are both secure and insecure ways of downloading and using zipped content. Back in 2014, NowSecure identified and properly disclosed zip file download and remote code execution (RCE) vulnerabilities on Android for Samsung and Vungle. Now Pangu has posted about iOS zipfile download issues identified as ZipperDown.
Comments
Article is closed for comments.