Notepad++ v8.5.6 still vulnerable to possible arbitrary code execution

#1

Post by dossy » Tue, Aug 29, 2023, 5:24 PM UTC

Notepad++ v8.5.6 still vulnerable to possible arbitrary code execution
securitylab.github.com

Re: Notepad++ v8.5.6 still vulnerable to possible arbitrary code execution

#2

Post by dossy » Tue, Aug 29, 2023, 5:24 PM UTC

A specially crafted malicious file when opened by Notepad++ may be able to execute arbitrary code on the victim's computer, without any further interaction, aside from opening the malicious file.

Re: Notepad++ v8.5.6 still vulnerable to possible arbitrary code execution

#3

Post by appleflaxen » Wed, Aug 30, 2023, 12:42 PM UTC

I think that N++ is a one-programmer project.

Don Ho seems like a really cool guy.

I hope he is able to get the patch Incorporated, because it sounds like the security team provided one.

Thanks Don, for your work; and thanks Jaroslav, for the security discovery.

Re: Notepad++ v8.5.6 still vulnerable to possible arbitrary code execution

#4

Post by nilslindemann » Wed, Aug 30, 2023, 2:21 PM UTC

appleflaxen wrote: post #3

I think that N++ is a one-programmer project. Don Ho seems like a really cool guy. I hope he is able to get the patch Incorporated, because it sounds like the security team provided one. Thanks Don, for your work; and thanks Jaroslav, for the security discovery.

He was an asshole when I once requested a feature to color the lines white, which appear when folding code.