Adventures in Video Conferencing Part 3: The Even Wilder World of WhatsApp

Posted by Natalie Silvanovich, Project Zero WhatsApp is another application that supports video conferencing that does not use WebRTC as its core implementation. Instead, it uses PJSIP, which contains some WebRTC code, but also contains a substantial amount of other code, and predates the WebRTC...

libdwarf Integer Overflow Vulnerability

libdwarf is a set of tools for reading and writing DWARF2 debugging information. An integer overflow vulnerability exists in libdwarf that stems from the program failing to adequately copy user-supplied data into a buffer. An attacker could use this vulnerability to execute arbitrary code in the...

ZeroClipboard XSS vulnerabilities

Exploit for php platform in category web applications These are Cross-Site Scripting vulnerabilities in ZeroClipboard. Last week I've made my research of these vulnerabilities and informed all developers previous and current of ZeroClipboard. When I've downloaded ZeroClipboard in September 2011,...