A list of data-only attacks
| Program | Version | Variable | Location | Malicious Goal |
|---|---|---|---|---|
| SQLite | 3.40.1 | p->doXdgOpen | shell.c:20270 | execute arbitrary program |
| p->zTempFile | shell.c:20560 | delete any file | ||
| isDelete | sqlite3.c:42939 | delete any file | ||
| V8 | 8.5.188 | enable_os_system | d8-posix.cc:762 | execute any program |
We thank National Science Foundation (NSF) for supporting our work. This research is supported by NSF under grant CNS-2247652.