Description
A weakness has been identified in Flos Freeware Notepad2 4.2.25. This impacts an unknown function in the library TextShaping.dll. Executing a manipulation can lead to uncontrolled search path. The attack is restricted to local execution. The attack requires a high level of complexity. The exploitability is said to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Flos Freeware | Notepad2 | 4.2.25 | — |
References
- VDB-352373 | Flos Freeware Notepad2 TextShaping.dll uncontrolled search path vdb-entry
- VDB-352373 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #774778 | Flos Freeware Notepad2 4.2.25 Uncontrolled Search Path - DLL Hijacking with TextShaping.dll third-party-advisory
- https://drive.google.com/file/d/1w5-ztNIN28mPuidtjlsilKsKKQQNOiIJ/view related