Talk:Arbitrary code execution

Should add something about PHP injection being a form of arbitrary code execution but that the term arbitrary code execution is not commonly used for higher level arbitrary command execution bugs.SkyLined (talk) 23:49, 6 March 2008 (UTC)

SonicWALL

Come on now! Stop posting this page as a reference in every single signature. TekBoi [Ali Kilinc] (talk) 17:41, 30 March 2016 (UTC)

Extent and Limits of "Arbitrary Code Execution"

Just ran into a situation where someone assumed that all exploits that allow for Arbitrary (or "Remote", which Wikipedia cross references to here) Code Execution, means that a "hacker" that executes code on a hacked machine somehow, magically gains full control of the whole computer. This situation started from a new exploit discovered on HP Printers. My sense is that "full control" is not always the end-result of code being executed remotely. Read the article and it seems to confirm this, but I think that for the general public, the article would be improved if it spelled out explicitly the varying levels of "control" that can be achieved by executing code remotely, and give some real-life examples of these. I assume that in some cases the level of "control" is highly limited, which in others total access can be achieved. It would be good if this article spelled this out clearly so that there is no doubt that merely executing code does not necessarily mean total control.2605:6000:6947:AB00:1D9B:AE9C:E37E:9175 (talk) 20:03, 7 August 2018 (UTC)

• I've fleshed this out a little bit, but I think that it could still be improved significantly Samlanning (talk) 18:34, 11 May 2019 (UTC)

Use of "Attacker"

There is a line in the beginning of the article saying "In computer security, arbitrary code execution (ACE) is an attacker's ability to run any commands or code of the attacker's choice on a target machine or in a target process." Despite the fact that ACE isn't only an ability for attackers, but has multiple applications, some of which aren't malicious. What should be done about this? -A Fluffy Kitteh (FluffyKittehz User Profile Page) 20:35, 27 January 2022 (UTC)

An Attack is a fairly standard term for the exploitation of faults in a system that causes it to behave outside its intended bounds. I can't really point to any particular reading on it but you'll see folks like those from AGDQ using similar lingo in their own write-ups. In the Information Security context it carries more of a Game Theory connotation of "Attack/Defend". RequestSelector (talk) 19:13, 1 June 2023 (UTC)