Skip to content
OpenAdvisories
High WID-SEC-2023-2188 4 CVEs

Notepad++: Mehrere Schwachstellen ermöglichen Codeausführung

Published Aug 27, 2023 · Updated Sep 11, 2023 · Revision 5 · de-DE

Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Notepad++ ausnutzen, um beliebigen Programmcode auszuführen.

Product

Notepad++ ist ein Open-Source-Editor, der viele Programmiersprachen unter Microsoft Windows unterstützt.

Vulnerabilities 4

  • High 7.8
    CVE-2023-40031 Public exploit

    Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert

    Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known patches are availabl…

    notepad-plus-plus notepad-plus-plus
  • Medium 5.5
    CVE-2023-40036

    Notepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneChar

    Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `CharDistributionAnalysis::HandleOneChar`. The exploitability of this issue is not clear. Potentially, it may be used to leak int…

    notepad-plus-plus notepad-plus-plus
  • Medium 5.5
    CVE-2023-40164

    Notepad++ global buffer read overflow in nsCodingStateMachine::NextState

    Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextStater`. The exploitability of this issue is not clear. Potentially, it may be used to leak internal m…

    notepad-plus-plus notepad-plus-plus
  • Medium 5.5
    CVE-2023-40166

    Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining

    Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFromTextBegining `. The exploitability of this issue is not clear. Potentially, it may be used to leak …

    notepad-plus-plus notepad-plus-plus

Revision history

  1. #5

    Neue Updates aufgenommen

  2. #4

    Source-Code Patch verfügbar

  3. #3

    Neue Updates von GitHub aufgenommen

  4. #2

    Korrektur: Kein Patch verfügbar

  5. #1

    Initiale Fassung

References