7.6
CVSSv2

CVE-2007-2666

Published: 14/05/2007 Updated: 16/10/2018
CVSS v2 Base Score: 7.6 | Impact Score: 10 | Exploitability Score: 4.9
VMScore: 765
Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and previous versions, allows user-assisted remote malicious users to execute arbitrary code via certain Ruby (.rb) files with long lines. NOTE: this was originally reported as a vulnerability in notepad++.

Vulnerable Product Search on Vulmon Subscribe to Product

scintilla scintilla 1.73

notepad\\+\\+ notepad\\+\\+

Exploits

/*[ notepad++[v41]: (win32) ruby file processing buffer overflow exploit ]* * * * by: vade79/v9 v9@fakehalous (fakehalo/realhalo) * * * * compile: ...