CVE-2023-6401 - NotePad++ dbghelp.exe uncontrolled search path

Back Back to CVE browser

HIGH

NotePad++ dbghelp.exe uncontrolled search path

Published Nov 30, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.33%

Description

A vulnerability classified as problematic was found in NotePad++ up to 8.1. Affected by this vulnerability is an unknown functionality of the file dbghelp.exe. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The identifier VDB-246421 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor n/a Product NotePad++ Default
n/a
- Version
  8.0
  Status
  affected
  Constraints
  -
- Version
  8.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

NotePad++

n/a

Version	Status	Constraints
8.0	affected	-
8.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-58638
Advisory
https://vuldb.com/?ctiid.246421
signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.246421
vdb-entryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-58638		Advisory
https://vuldb.com/?ctiid.246421		signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.246421		vdb-entryThird Party Advisory