miniblog.

← Back to all posts
Jun 8, 2024 at 02:48
It is remarkably hard to escape command line arguments safely on Windows, and the standard libraries of multiple languages have needed patching:
BatBadBut: You can't securely execute commands on Windows
BatBadBut: You can't securely execute commands on Windows
Introduction Hello, I’m RyotaK ( @ryotkak ), a security engineer at Flatt Security Inc. Recently, I reported multiple vulnerabilities to several programming languages that allowed an attacker to perform command injection on Windows when the specific conditions were satisfied. Today, affected vendors published advisories of these vulnerabilities , so I’m documenting the details here to provide more information about the vulnerabilities and minimize the confusion regarding the high CVSS score. TL;DR The BatBadBut is a vulnerability that allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied.

Related Posts

Oct 22, 2022 at 00:02
On the remarkably large feature set of format strings in common lisp, and comparing with an s-expression based syntax alternative:
Eliminating FORMAT
Apr 10, 2022 at 08:37
Showing lines of context is a remarkably hard problem for a syntactic diff. Line 23 on the right is new, but lines 24 and 25 also map to the same line on the left! Initially I thought this was a bug. It's impossible to show exactly N context lines whilst preserving alignment.
Photo
X / ?
Dec 11, 2018 at 00:26
Usually, npmtrends is a great way of choosing a library that's widely used and probably more reliable and better documented. When choosing a JS parser, the options are remarkably close!
Photo
acorn vs esprima | npm trends
acorn vs esprima | npm trends
Comparing trends for acorn 8.15.0 which has 123,183,083 weekly downloads and 11,244 GitHub stars vs. esprima 4.0.1 which has 65,191,351 weekly downloads and 7,120 GitHub stars.
X / ?