CVE-2007-2666
Notepad++ 4.1 (Windows x86) - '.ruby' File Processing Buffer Overflow
Summary
Descriptions
Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted remote attackers to execute arbitrary code via certain Ruby (.rb) files with long lines. NOTE: this was originally reported as a vulnerability in notepad++.
Un desbordamiento de búfer en la región Stack de la memoria en el archivo LexRuby.cxx (SciLexer.dll) en Scintilla versión 1.73, tal y como se utiliza en notepad++ versión 4.1.1 y anteriores, permite a los atacantes remotos asistidos por el usuario ejecutar código arbitrario por medio de ciertos archivos Ruby (.rb) con líneas largas. NOTA: esto fue reportado originalmente como una vulnerabilidad en notepad++.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2007-05-14 CVE Reserved
- 2007-05-14 CVE Published
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
Threat Intelligence Resources (0)
| Select | Title | Date |
|---|
Select an advisory to view details here.
| Select | Title | Date |
|---|
Select an exploit to view details here.
References (12)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/36007 | Vdb Entry | |
| http://scintilla.cvs.sourceforge.net/scintilla/scintilla/src/LexRuby.cxx?view=log#rev1.13 | X_refsource_confirm | |
| http://secunia.com/advisories/25327 | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/468529/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/469348/100/100/threaded | Mailing List | |
| http://www.securityfocus.com/bid/23961 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/34269 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/34372 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/3912 | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/25245 | 2018-10-16 | |
| http://www.vupen.com/english/advisories/2007/1794 | 2018-10-16 | |
| http://www.vupen.com/english/advisories/2007/1867 | 2018-10-16 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Notepad\+\+ Search vendor "Notepad\+\+" | Notepad\+\+ Search vendor "Notepad\+\+" for product "Notepad\+\+" | <= 4.1.1 Search vendor "Notepad\+\+" for product "Notepad\+\+" and version " <= 4.1.1" | - |
Affected
| ||||||
| Scintilla Search vendor "Scintilla" | Scintilla Search vendor "Scintilla" for product "Scintilla" | 1.73 Search vendor "Scintilla" for product "Scintilla" and version "1.73" | - |
Affected
| ||||||