Zerush@lemmy.ml to Open Source@lemmy.ml · 8 hours agoLibreOffice learns to speak Markdown in version 26.2www.theregister.comexternal-linkmessage-square13fedilinkarrow-up1206arrow-down10
arrow-up1206arrow-down1external-linkLibreOffice learns to speak Markdown in version 26.2www.theregister.comZerush@lemmy.ml to Open Source@lemmy.ml · 8 hours agomessage-square13fedilink
minus-squareClassy Hatter@sopuli.xyzlinkfedilinkarrow-up21·7 hours agoI don’t know the technicalities, but Markdown supports links, and it’s possible to craft a link that downloads a file and then executes it. You can look up the Notepad.exe RCE vulnerability from this year.
minus-squareBig Baby Thor@sopuli.xyzlinkfedilinkarrow-up13·7 hours agoBasically Notepad would pass the link to ShellEx and could launch executables.
I don’t know the technicalities, but Markdown supports links, and it’s possible to craft a link that downloads a file and then executes it. You can look up the Notepad.exe RCE vulnerability from this year.
Basically Notepad would pass the link to ShellEx and could launch executables.