Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

[Bug] Notepad++ 'C' and 'CPP' File Handling Remote Stack Buffer Overflow Vulnerability

#7

Repro steps:

See this Security Focus entry.

Reported by Jocelyn Legault · October 9th, 2009 @ 12:12 AM

State: invalid
Milestone: v1.0.0
Assigned to: Jocelyn Legault Jocelyn Legault

Activity

  1. Jocelyn Legault
    Jocelyn Legault
    • Assigned user set to npp-community

    October 14th, 2009 @ 11:00 PM

  2. Jocelyn Legault
    Jocelyn Legault
    • Assigned user changed from npp-community to Jocelyn Legault
    • State changed from new to open

    October 24th, 2009 @ 05:45 AM

  3. Jocelyn Legault
    Jocelyn Legault
    • State changed from open to invalid

    This exploit isn't reproducible in N++CR. While N++ strains terribly under the load (we're loading a 100MB file after all!) it does not crash or throws any exception.
    It's my opinion that the secure form of the str functions being used in this version shields it from this particular problem.

    November 5th, 2009 @ 10:32 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.