Zerush@lemmy.ml to Open Source@lemmy.ml · 10 days agoLibreOffice learns to speak Markdown in version 26.2www.theregister.comexternal-linkmessage-square14linkfedilinkarrow-up11
arrow-up11external-linkLibreOffice learns to speak Markdown in version 26.2www.theregister.comZerush@lemmy.ml to Open Source@lemmy.ml · 10 days agomessage-square14linkfedilink
minus-squareClassy Hatter@sopuli.xyzlinkfedilinkarrow-up0·10 days agoI don’t know the technicalities, but Markdown supports links, and it’s possible to craft a link that downloads a file and then executes it. You can look up the Notepad.exe RCE vulnerability from this year.
minus-squareBig Baby Thor@sopuli.xyzlinkfedilinkarrow-up0·10 days agoBasically Notepad would pass the link to ShellEx and could launch executables.
I don’t know the technicalities, but Markdown supports links, and it’s possible to craft a link that downloads a file and then executes it. You can look up the Notepad.exe RCE vulnerability from this year.
Basically Notepad would pass the link to ShellEx and could launch executables.