Do rectify my understanding if I made a mistake.
For Arbitrary Code Execution, it refers to an attacker able to run any code on the target system usually done locally?
For Remote Code Execution, it has the same meaning as ACE but is done over the internet?
In: Technology
You could put it that way.
The reason these two are differentiated though is because of different intents.
Arbitrary Code Execution is usually something users do on locked down devices. For instance, the Nintendo Switch is a locked down device, it only allows people to play games Nintendo has approved to be published for the switch and they put in a lot of effort to make sure that no games or software can be played without Nintendo’s approval.
Point is, arbitrary code execution is generally not something very malicious, usually its refers to something users do to their own devices.
Remote Code Execution is generally used in a malicious context, it means a hacker has gained control of your computer to some extent.
It’s more Arbitrary Code Executions is either remote or local, and Remote Code Execution is the explicitly remote.
Otherwise you got the gist.
Local Arbitrary Code Execution is just more often stuff like jailbreaking a phone or installing homebrew programs on a console. So not many people talk about it outside of those circles.
Latest Answers