PT-2023-32639 · Notepad++ · Notepad++

Tfhm · Publicado 2023-11-30 · Atualizado 2024-05-17 · CVE-2023-6401

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NotePad++ versions up to 8.1

Description A problematic issue was found in NotePad++, affecting an unknown functionality of the file dbghelp.exe. This leads to an uncontrolled search path. The issue can be exploited locally.

Recommendations For versions up to 8.1, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2023-6401

Produtos afetados

Notepad++

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-6401 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-6401 · Aviso do Fabricante
• https://vuldb.com/?id.246421 · Nota
• https://vuldb.com/?ctiid.246421 · Nota
• https://twitter.com/CVEnew/status/1730235657455341987 · Publicação no Twitter