hackers abusing text editors for privilege escalation

some text editors allow 3rd party code to run as a extensions to the application, this provides some benefits but also can be a security risk. a researcher named dor azouri looked at some programs called sublime , vim , emacs , gedit and pico and found that half allow this privilege escalation. for example if i am an system admin and i restrict privileges to certain applications or permissions. these editors allow me to bypass by adding a few lines of code which starts the programs. you can read more on this article.

https://www.securityweek.com/hackers-can-abuse-text-editors-privilege-escalation

Comments

Popular posts from this blog

hackers awarded $267k at pwn2own 2k18