Zerush@lemmy.ml to Open Source@lemmy.ml · 3 days agoLibreOffice learns to speak Markdown in version 26.2www.theregister.comexternal-linkmessage-square14fedilinkarrow-up1316arrow-down12
arrow-up1314arrow-down1external-linkLibreOffice learns to speak Markdown in version 26.2www.theregister.comZerush@lemmy.ml to Open Source@lemmy.ml · 3 days agomessage-square14fedilink
minus-squareClassy Hatter@sopuli.xyzlinkfedilinkarrow-up33·3 days agoI don’t know the technicalities, but Markdown supports links, and it’s possible to craft a link that downloads a file and then executes it. You can look up the Notepad.exe RCE vulnerability from this year.
minus-squareBig Baby Thor@sopuli.xyzlinkfedilinkarrow-up20·3 days agoBasically Notepad would pass the link to ShellEx and could launch executables.
I don’t know the technicalities, but Markdown supports links, and it’s possible to craft a link that downloads a file and then executes it. You can look up the Notepad.exe RCE vulnerability from this year.
Basically Notepad would pass the link to ShellEx and could launch executables.