Towards Discovering Remote Code Execution Vulnerabilities in Apple FaceTime

Explore reverse engineering techniques for Apple FaceTime, focusing on call initialization and connection processes. Delve into attacker-controlled data propagation paths and various attack surfaces. Learn about the I10 Service, Attack Service, UUID Leak, Paper Overflow, Stack Overflow, Stack Cookie, Compiler Issues, and other potential vulnerabilities. Gain insights from researchers Tao Huang and Tielei Wang in this 34-minute Black Hat conference talk on discovering remote code execution vulnerabilities in FaceTime.

Introduction
I10 Service
Attack Service
UUID Leak
Paper Overflow
Stack Overflow
Stack Cookie
Compiler Issue
Other Attack Surface
Conclusion