PT-2023-5458 · Notepad++ · Notepad++
Jaroslav Lobačevski
·
Publicado
2023-08-25
·
Atualizado
2023-09-11
·
CVE-2023-40036
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Notepad++ versions 8.5.6 and prior
Description
The issue is related to a global buffer read overflow in the
CharDistributionAnalysis::HandleOneChar function. This may potentially be used to leak internal memory allocation information. The exploitability of this issue is not clear.Recommendations
For Notepad++ versions 8.5.6 and prior, update to version 8.5.7 to resolve the issue. As a temporary workaround, consider disabling the
CharDistributionAnalysis::HandleOneChar function until a patch is available.Exploit
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Notepad++