PT-2023-4780

CVE-2023-40166

Publicado

2023-08-21

Atualizado

2023-09-11

Descrição por

CVSS 3.1

5.5

Média

MétricasAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Notepad++ versions 8.5.6 and prior

Description The issue is related to a heap buffer read overflow in the FileManager::detectLanguageFromTextBegining() function. This may potentially be used to leak internal memory allocation information. The exploitability of this issue is not clear.

Recommendations For versions 8.5.6 and prior, update to version 8.5.7 or later to resolve the issue. As a temporary workaround, consider disabling the FileManager::detectLanguageFromTextBegining() function until a patch is available.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Jarlob

Jaroslav Lobačevski

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')

CWE-122: Heap-based Buffer Overflow