Anybody else using Notepad++ ?

[guiismiti]

:S

https://wikileaks.org/ciav7p1/cms/page_26968090.html

[kung foo man]

That exploit is kinda worthless IMO, the attacker would still need to be able to save his .dll into a folder where Windows looks for extra .dll's. And to move files into those folders it needs Admin rights. So an attacker would kinda need to trick you into copying his evil SciLexer.dll into some folder... and who the fuck puts random .dll's from some person into some folders?

[Mitch]

They already solved this exploit in version 7.3.3.
https://notepad-plus-plus.org/news/n...ing-issue.html