CVEvulnerability

CVE-2007-2666

7.6 HIGH Published 2007-05-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-05-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted remote attackers to execute arbitrary code via certain Ruby (.rb) files with long lines. NOTE: this was originally reported as a vulnerability in notepad++.

Affected configurations

• notepad\+\+ notepad\+\+ (<= 4.1.1) • scintilla scintilla 1.73

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References