Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Nonnative library code can also be susceptible to related security flaws. Suppose there exists a library that contains a vulnerability that is not directly exposed, perhaps because it lies in an unused method. Loading this library may not directly expose a vulnerability. However, an attacker could then load an additional library that exploits the first library's vulnerability. MoveoverMoveoverr, nonnative libraries often use doPrivileged blocks, making them attractive targets.

...