Notepad++ Exploit


SUBMITTED BY: Guest

DATE: July 11, 2015, 9:23 p.m.

FORMAT: Text only

SIZE: 898 Bytes

HITS: 452

  1. # Title: Notepad++ - Crash
  2. # Date: 10/07/2015
  3. # Author: Rahul Pratap Singh (@0x62626262)
  4. # Vendor Homepage: https://notepad-plus-plus.org
  5. # Download: https://notepad-plus-plus.org/download/v6.7.3.html
  6. # Version: v6.7.3
  7. # Tested on: Windows_XP_x86 & Windows_7_x86
  8. Incorrect theme file parsing, that leads to crash.
  9. -Create a .xml file with numbereous "A" (around 1000) in it and save as
  10. test.xml
  11. -Go to this directory in windows "/appdata/roaming/notepad++/themes/" and
  12. paste above test.xml file in this theme folder and restart notepad++
  13. -Now start notepad++ and in menu tab, go in settings and then select style
  14. configurator and now select test file in theme select option
  15. -Now hit "save and close" button, it will crash with an error message
  16. Thanks
  17. Rahul Pratap Singh
  18. https://www.exploit-db.com/exploits/37558/

comments powered by Disqus