Threat actors can exploit a security vulnerability in the Rust standard library to target Windows systems in command injection attacks.
  • Sekoia@lemmy.blahaj.zone
    0·
    6 months ago

    Also, the reason this is a CVE is because Rust itself guarantees that calling commands doesn’t evaluate shell stuff (but this breaks that guarantee). As far as I know C/C++ makes no such guarantee whatsoever.