PDA

View Full Version : Anybody else using Notepad++ ?



guiismiti
26th March 2017, 16:53
:S

https://wikileaks.org/ciav7p1/cms/page_26968090.html

kung foo man
26th March 2017, 17:39
That exploit is kinda worthless IMO, the attacker would still need to be able to save his .dll into a folder where Windows looks for extra .dll's. And to move files into those folders it needs Admin rights. So an attacker would kinda need to trick you into copying his evil SciLexer.dll into some folder... and who the fuck puts random .dll's from some person into some folders?

Mitch
26th March 2017, 18:50
They already solved this exploit in version 7.3.3.
https://notepad-plus-plus.org/news/notepad-7.3.3-fix-cia-hacking-issue.html