CVE-2007-2666
- State
- Published
- Severity
- Not scored
- Published
- May 14, 2007
- Updated
- Aug 7, 2024
- Reserved
- May 14, 2007
Description
Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted remote attackers to execute arbitrary code via certain Ruby (.rb) files with long lines. NOTE: this was originally reported as a vulnerability in notepad++.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2007-1794vdb-entry
- 20070513 notepad++[v4.1]: (win32) ruby file processing buffer overflow exploit.mailing-list
- 3912exploit
- 25327third-party-advisory
- ADV-2007-1867vdb-entry
- 20070523 Re: notepad++[v4.1]: (win32) ruby file processing buffer overflow exploit.mailing-list
- 23961vdb-entry
- notepadplus-rb-bo(34269)vdb-entry
- http://scintilla.cvs.sourceforge.net/scintilla/scintilla/src/LexRuby.cxx?view=log#rev1.13
- scintilla-rb-bo(34372)vdb-entry
- 36007vdb-entry
- 25245third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.