The Nintendo Switch has been left with the modified vulnerability six months ago
Nintendo Switch is an open source HTML rendering engine groupWebKitBrowser corresponding to "NetFront Browser NX"Is installed. However, this browser has reported that vulnerabilities related to Webkit remained as it was pointed out six months ago and iOS 9.3.5 had been patched the fix.
Nintendo Switch ships with unpatched 6-month-old WebKit vulnerabilities | Ars Technica
https://arstechnica.com/gaming/2017/03/nintendo-switch-ships-with-unpatched-6-month-old-webkit-vulnerabilities/
The first time we reported the remaining Webkit vulnerabilities in the Nintendo Switch is a hacker related to JailbreakQwertyoruiopMr. Webkit reported a vulnerability called "Trident" that could steal iOS device's incoming / outgoing history, text messages, contacts, calendar information, Gmail, WhatApp and other messages. The shipped Nintendo Switch has a Webkit vulnerability that has been fixed in iOS 9.3.5, and through this vulnerability, a photo showing that arbitrary HTML was executed in the browser of Nintendo Switch has been uploaded.
That's just how it goesPic.twitter.com/ztkFrbjz5u
- qwertyoruiop (@ qwertyoruiopz)March 11, 2017
However, it is difficult to open your favorite page from Nintendo Switch's browser through this vulnerability. Also, it does not seem to worry that important personal information like the iOS device will be pulled out. Qwertyoruiop who released the information said, "I will just say for sure but I did not Jailbreak the Switch, but I just demonstrated a proof of concept that you can execute the exec command on a browser." .
Just to be clear: I did not jailbreak the Switch. I simply demonstrated a proof of concept exploit that gives me code exec in the browser.
- qwertyoruiop (@ qwertyoruiopz)March 13, 2017
On the other hand, qwertyoruiop said "This will be the starting point for various hacking studies"It may be that other hackers will discover Nintendo Switch 's vulnerability etc. Since this vulnerability has already been handled by Apple, Nintendo is expected to issue a patch soon. In LiveOverflow's YouTube channel, a demo movie about the vulnerability of Nintendo Switch 's Webkit is also released.
What do Nintendo Switch and iOS 9.3 have in common? CVE-2016-4657 walk-through - YouTube
Related Posts: