Microsoft: I have made Notepad✨
-
Microsoft: I have made Notepad
Security researchers: You fucked up a perfectly good plaintext editor is what you did. Look at it. It's got RCEs.
-
Microsoft: I have made Notepad
Security researchers: You fucked up a perfectly good plaintext editor is what you did. Look at it. It's got RCEs.
@tess I'm going to absolutely lose my shit if this ever happens to stock vi. (No, not vim, though I like the context highlighting.)
-
Microsoft: I have made Notepad
Security researchers: You fucked up a perfectly good plaintext editor is what you did. Look at it. It's got RCEs.
> How could an attacker exploit this vulnerability?
>
> An attacker could _trick a user into clicking a malicious link_ inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files.That’s not an RCE, is it?
-
T tofticles@helvede.net shared this topic
