True, if there was a vulnerability where reading a byte stream could trigger a J... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

smackfu on July 13, 2015 | parent | context | favorite | on: First Java Zero-Day Attack in Two Years Targets NA...

True, if there was a vulnerability where reading a byte stream could trigger a JVM exploit, that is exploitable. But that would be a really weird bug, since the JVM isn't going to be the one parsing a byte stream.

nkassis on July 13, 2015 [–]

There is also the standard library, it does a lot of stuff that could hide a vulnerability.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact