Zerush@lemmy.ml to Open Source@lemmy.ml · 16 days agoLibreOffice learns to speak Markdown in version 26.2www.theregister.comexternal-linkmessage-square13linkfedilinkarrow-up1323arrow-down11
arrow-up1322arrow-down1external-linkLibreOffice learns to speak Markdown in version 26.2www.theregister.comZerush@lemmy.ml to Open Source@lemmy.ml · 16 days agomessage-square13linkfedilink
minus-squareClassy Hatter@sopuli.xyzlinkfedilinkarrow-up33·16 days agoI don’t know the technicalities, but Markdown supports links, and it’s possible to craft a link that downloads a file and then executes it. You can look up the Notepad.exe RCE vulnerability from this year.
minus-squareBig Baby Thor@sopuli.xyzlinkfedilinkarrow-up20·16 days agoBasically Notepad would pass the link to ShellEx and could launch executables.
I don’t know the technicalities, but Markdown supports links, and it’s possible to craft a link that downloads a file and then executes it. You can look up the Notepad.exe RCE vulnerability from this year.
Basically Notepad would pass the link to ShellEx and could launch executables.