cve/2007/CVE-2007-2666.md

CVE-2007-2666

Description

Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted remote attackers to execute arbitrary code via certain Ruby (.rb) files with long lines. NOTE: this was originally reported as a vulnerability in notepad++.

POC

Reference

• https://www.exploit-db.com/exploits/3912

Github

No PoCs found on GitHub currently.