Posted by kuberwastaken 21 hours ago
Good for you.
Now only <all Windows users>-1 are affected.
"No User Interaction"
Does that mean that paint doesnt have to be running?
Application being installed on a PC allows a specially crafted packet to arbitrarily execute code?
0. My gut says this is somehow related to indexing/thumbnail rendering. But maybe I'm off base.
1. The 'no user interaction' could be related to (ironically) some background pre-indexing process that windows is doing on files inserted to folders.
1.1. LOL maybe their bullshit 'Windows Copilot' which is why the description is so vague, don't want to torpedo things worse than they already are.
2. It could also be, still in the category of 'well, ok they click on a share folder and the preview runs' or a weird edge thing.
2.1. But they aren't being that clear yet, probably because it's bad.
UI:N it is with no interaction ?
is it a cve mistake ?
> An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.
Until somebody connects the dots on how the heck MS Paint is accessible over the network, I'm gonna maintain some pretty intense skepticism here.
>Unproven
>Remediation Level
>Official Fix
>Report Confidence
>Confirmed
I really like these secondary scoring factors, not just scoring the vuln itself, but how it's being attacked.
My take is that the addition of CoPilot to MS Paint is probably how this CVE got introduced.
> LLMs are now unfolding technical debt, poorly written code, and security vulnerabilities accumulated in software that they have created themselves.