Ant <ant@zimage.comANT> wrote

> https://support.apple.com/en-us/HT213913

Holy Shit. Apple coders are morons!

Despite the ignorant uneducated low-IQ iKook Alan Browne claiming
"zero-click" holes can't exist in iOS, this is another no-click exploit.
CVE-2023-41064 and CVE-2023-41061

All the attacker has to do is send a single image to your iMessage acct.
That's it.

One image.
And you don't even need to know it's there.

*That's how atrocious Apple's coding is - that zero-click holes abound*

There's a reason iOS has more than twice to three times as many zero-day
bugs as Android and more than ten times the exploits in the wild.

Did you look at that zero-day holes (which Apple did NOT find!)?
(Yes. Holes. Plural. The same bug in two different places!)

*Jesus Christ Apple! Who does your coding? High school dropouts?*

VE-2023-41064 is related to a buffer overflow issue in ImageIO where
processing a maliciously crafted image results in arbitrary code execution.

The same result was noted for Wallet in CVE-2023-41061 due to a maliciously
crafted attachment.

*It's classic Apple incompetent coding - ridiculously sophomoric*

Description:
A buffer overflow issue was addressed with improved memory handling.
CVE-2023-41064: The Citizen Lab at The University of Torontoʼs Munk School
"Apple dealt with a validation issue with improved logic"

In other words, the sophomores in high school who do Apple's coding added a
check for a buffer overflow in two separate pieces of Apple code.

Not only is Apple incompetent in chip design - they're morons in coding.
--
It's shocking how atrocious Apple products are, where the ikooks think it's
normal to have the most zero day holes & exploited vulnerabilities.

On 2023-09-11 18:28, Wally J wrote:
> Ant <ant@zimage.comANT> wrote
>
>> https://support.apple.com/en-us/HT213913
>
> Holy Shit. Apple coders are morons!
>
> Despite the ignorant uneducated low-IQ iKook Alan Browne claiming
> "zero-click" holes can't exist in iOS, this is another no-click exploit.
> CVE-2023-41064 and CVE-2023-41061
>
> All the attacker has to do is send a single image to your iMessage acct.
> That's it.
>
> One image.
> And you don't even need to know it's there.
>
> *That's how atrocious Apple's coding is - that zero-click holes abound*
>
> There's a reason iOS has more than twice to three times as many zero-day
> bugs as Android and more than ten times the exploits in the wild.
>
> Did you look at that zero-day holes (which Apple did NOT find!)?
> (Yes. Holes. Plural. The same bug in two different places!)
>
> *Jesus Christ Apple! Who does your coding? High school dropouts?*
>
> VE-2023-41064 is related to a buffer overflow issue in ImageIO where
> processing a maliciously crafted image results in arbitrary code execution.
>
> The same result was noted for Wallet in CVE-2023-41061 due to a maliciously
> crafted attachment.
>
> *It's classic Apple incompetent coding - ridiculously sophomoric*
>
> Description:
> A buffer overflow issue was addressed with improved memory handling.
> CVE-2023-41064: The Citizen Lab at The University of Torontoʼs Munk School
> "Apple dealt with a validation issue with improved logic"
>
> In other words, the sophomores in high school who do Apple's coding added a
> check for a buffer overflow in two separate pieces of Apple code.
>
> Not only is Apple incompetent in chip design - they're morons in coding.

People make mistakes, Arlen.

People in companies all around the world.

But you only care when it's Apple.