logoalt Hacker News

yread • yesterday at 9:13 PM • 1 reply • view on HN

I don't think so:

> User Interaction: None

> Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.


Replies

criddell • yesterday at 9:26 PM

> An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network.

What server is MS Paint running or what services does it provide?

Edit: Apparently you can use it to print an image from the command-line. Is that how this is being exploited?

➕ show 2 replies