Google white hat hacker found code execution flaw in Notepad

guest · May 30, 2019

Google white hat hacker found code execution flaw in Notepad
May 29, 2019
https://securityaffairs.co/wordpress/86297/hacking/code-execution-flaw-notepad.html

The Google Project Zero researcher Tavis Ormandy announced the discovery of a code execution flaw in Microsoft’s Notepad text editor

Am I the first person to pop a shell in notepad? ….believe it or not, It's a real bug! pic.twitter.com/t2wTh7E93p
— Tavis Ormandy (@taviso) May 28, 2019
Ormandy anticipated that the vulnerability is a memory corruption bug and he shared via Twitter an image that demonstrates how to manage a “pop a shell in Notepad.”
[...] the expert confirmed he has already developed a “real exploit” for the issue.

A message published by Chaouki Bekrar, founder of zero-day broker Zerodium, confirms that the type of issue found by the Google white hat hacker is not uncommon to find. The real surprise, according to Chaouki Bekrar, is to find an expert that report it to Microsoft instead of exploiting it or attempt to sell it.
Click to expand...

Log in or Sign up

Google white hat hacker found code execution flaw in Notepad

guest Guest

Log in or Sign up

Google white hat hacker found code execution flaw in Notepad

guest Guest

Useful Searches