4 ms·

One of the findings: Notepad++ has a DLL hijack [1] [1] https://wikileaks.org/ciav7p1/cms/page_26968090.html https://wikileaks.org/ciav7p1/cms/page_26968090.ht

One of the findings: Notepad++ has a DLL hijack [1] [1] https://wikileaks.org/ciav7p1/cms/page_26968090.html https://wikileaks.org/ciav7p1/cms/page_26968090.html

mpeg 10y ago
Any executable is vulnerable to DLL hijacking, they're just looking for easier targets that load known DLLs (with known function signatures) from their own folders (NOT system folders). I'm assuming the goal is to minimise detection by what they call PSPs (av / security products) This is not a flaw within notepad++
- lmm 10y ago
  Arguably loading DLLs from non-system folders is bad design in this day and age.
  - roel_v 10y ago
    No, it's not, not even 'arguably'.