Notepad++ - Crash - exploit.company

vendor:

Notepad++

by:

Rahul Pratap Singh

N/A

CVSS

N/A

Incorrect theme file parsing

None

CWE

Product Name: Notepad++

Affected Version From: v6.7.3

Affected Version To: v6.7.3

Patch Exists: NO

Related CWE: None

CPE: None

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows_XP_x86 & Windows_7_x86

2015

Notepad++ – Crash

Create a .xml file with numerous 'A's (around 1000) in it and save as test.xml. Go to this directory in windows '/appdata/roaming/notepad++/themes/' and paste above test.xml file in this theme folder and restart notepad++. Now start notepad++ and in menu tab, go in settings and then select style configurator and now select test file in theme select option. Now hit 'save and close' button, it will crash with an error message.

Mitigation:

None

Source

Exploit-DB raw data:

# Title: Notepad++ - Crash
# Date: 10/07/2015
# Author: Rahul Pratap Singh (@0x62626262)
# Vendor Homepage: https://notepad-plus-plus.org
# Download: https://notepad-plus-plus.org/download/v6.7.3.html
# Version: v6.7.3
# Tested on: Windows_XP_x86 & Windows_7_x86

Incorrect theme file parsing, that leads to crash.

-Create a .xml file with numbereous "A" (around 1000) in it and save as
test.xml
-Go to this directory in windows  "/appdata/roaming/notepad++/themes/" and
paste above test.xml file in this theme folder and restart notepad++
-Now start notepad++ and in menu tab, go in settings and then select style
configurator and now select test file in theme select option
-Now hit "save and close" button, it will crash with an error message

Thanks

Rahul Pratap Singh