We got notepad.exe RCE before GTA 6
Windows Notepad App Remote Code Execution Vulnerability
41–50 of 538 posts
Re: Windows Notepad App Remote Code Execution Vulnerability
#42I found a copy of the win98 (I believe) notepad.exe a while back, and it works perfectly on windows 11 (though the "about notepad" dialog shows the windows 11 version for some reason??). I can write text into it, save it, and load text again. What more does notepad need? And it has a very nostalgic font too
How do you edit notes using Microsoft Copilot 365 for Notepad Copilot using that version?
Re: Windows Notepad App Remote Code Execution Vulnerability
#43Earlier quoted context omitted.
> If I read it correctly (but could be mistaken), it runs with setuid root I am certain you are mistaken. I couldn't find anything that hints at notepad running with elevated privileges.
People very often run notepad as administrator (anything launched from administrative powershell instances will run like this). In fact, if you enabled developer mode on your computer there's a registry key that gets set to run notepad as admin, it's: `runas /savecred /user:PC-NAME\Administrator “notepad %1”` in HKEY_CLASSES_ROOT-> * -> shell -> runas (new folder) -> (Default) And, if I'm not totally mistaken, notepa…
> And, if I'm not totally mistaken, notepad also has the ability to reopen files as administrator, but I don't remember how to invoke it.
I think that's a notepad plus plus feature. I had it offer to reopen itself as administrator when editing system files like HOSTS.
Re: Windows Notepad App Remote Code Execution Vulnerability
#44I found a copy of the win98 (I believe) notepad.exe a while back, and it works perfectly on windows 11 (though the "about notepad" dialog shows the windows 11 version for some reason??). I can write text into it, save it, and load text again. What more does notepad need? And it has a very nostalgic font too
It needs far more features apparently. Tons more. That's why Notepad++ is popular. Which also had a severe security vulnerability recently. Which was actively exploited by some state actor like China.
The OS provided option can be bare bones, stable, secure and just utilitarian. This promotes having people choose their own tools for the features they want and not really expecting much other than reliability from the OS version. They didn’t need to mess with a good thing.
Ok, tabs, I do like the tabs.
Re: Windows Notepad App Remote Code Execution Vulnerability
#45Yeah, clicking unverified links in a markdown document to launch an executable.... Clicking unknown links is always a bad idea, but a CVE for that? I dunno....
Even if you want to Notepad have clickable links, maybe not allow it to blindly allow every URL scheme known to man. It seems reasonable to limit it to do http/https and MAYBE mailto.
Re: Windows Notepad App Remote Code Execution Vulnerability
#46I found a copy of the win98 (I believe) notepad.exe a while back, and it works perfectly on windows 11 (though the "about notepad" dialog shows the windows 11 version for some reason??). I can write text into it, save it, and load text again. What more does notepad need? And it has a very nostalgic font too
I extracted out notepad.exe, calc.exe and mspaint.exe from Windows 7. I use them on Windows 11. They work perfectly.
Might as well just use Windows 7 if the security surface is this bad on later windows.
Re: Windows Notepad App Remote Code Execution Vulnerability
#47So notepad now renders links, then when clicks execute the code on those links (not just loading a website in a browser for example)?
Re: Windows Notepad App Remote Code Execution Vulnerability
#48Earlier quoted context omitted.
That recent Notepad++ incident was a supply chain attack, not a vulnerability in the original program.
Strictly, no. But it was a vulnerability in the design of Notepad++, key elements here being the featureset that requires frequent updates and the lack of integrity checks during the upgrade process. This has prompted me to move on from Notepad++ - it's sad, because I've used it for many years, but this is too much.
> in the design of Notepad++
One could argue it's an issue with windows where you can't just pull updates using a package manager/app store.
Re: Windows Notepad App Remote Code Execution Vulnerability
#49So what this means is every Windows program is now a cve nightmare (or goldmine, depending on view)?
Yeah the other day in calc.exe I pressed F7 in programmer mode to change to octal (F5 to F8 select Hex, Dec, Oct, Bin), and instead it asked if I was sure I wanted to enable caret browsing.
I've found calc's currency converter feature frightening.
Re: Windows Notepad App Remote Code Execution Vulnerability
#50A few days ago, Notepad++ got compromised—apparently by a state actor (or a proxy). And now, today, Windows’ built-in Notepad has a fresh CVE. What a life. At this point, what am I supposed to do other than uninstall Windows completely? No real sandboxing, a mountain of legacy…
Well technically Unixes like Linux are a mountain of legacy and they are fine.
Windows is just a mountain of shit.