Zerush@lemmy.ml to Open Source@lemmy.ml · 3 months agoLibreOffice learns to speak Markdown in version 26.2www.theregister.comexternal-linkmessage-square13fedilinkarrow-up1321arrow-down10
arrow-up1321arrow-down1external-linkLibreOffice learns to speak Markdown in version 26.2www.theregister.comZerush@lemmy.ml to Open Source@lemmy.ml · 3 months agomessage-square13fedilink
minus-squareClassy Hatter@sopuli.xyzlinkfedilinkarrow-up33·3 months agoI don’t know the technicalities, but Markdown supports links, and it’s possible to craft a link that downloads a file and then executes it. You can look up the Notepad.exe RCE vulnerability from this year.
minus-squareBig Baby Thor@sopuli.xyzlinkfedilinkarrow-up21·3 months agoBasically Notepad would pass the link to ShellEx and could launch executables.
I don’t know the technicalities, but Markdown supports links, and it’s possible to craft a link that downloads a file and then executes it. You can look up the Notepad.exe RCE vulnerability from this year.
Basically Notepad would pass the link to ShellEx and could launch executables.