Hacker News

points by falcor84 2 days ago | 0 comments

Wow! At first sight I was sure it was a joke, but no. What a time...

https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...

Presumably this is like many other graphics tool vulnerabilities this works by the attacker persuading a user to open a file that exercises the bug. Not terribly unusual.

[–] yread 2 days ago

I don't think so:

> User Interaction: None

> Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.

[–] criddell 2 days ago

> An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network.

What server is MS Paint running or what services does it provide?

Edit: Apparently you can use it to print an image from the command-line. Is that how this is being exploited?

[–] 80fj0348i 2 days ago

MS Paint has Copilot now

[–] criddell 2 days ago

Does that turn it into a server or service?

[–] 80fj0348i 2 days ago

I'm no expert but so much of Windows is implemented as services. svchost.exe is probably involved somehow. Like it wouldn't surprise me if Copilot is implemented as a service and it talks to Paint via IPC messages or something

[–] steve1977 2 days ago

But that alone wouldn't make the service listen on the network, even if it were the case.

[–] lakeviewterrace 2 days ago

IIS (Internet Impasto Server)

[–] dist-epoch 2 days ago

This site doesn't do jokes

[–] wolttam 2 days ago

At least not about serious security matters

[–] Sohcahtoa82 2 days ago

This site absolutely does jokes, it just doesn't beat horses into bloody pulps with the jokes the way reddit does. We have a higher standard. A joke has to actually be funny, and not some tired reference.

Except for the infamous Dropbox comment.

[–] IAmBroom 1 day ago

Post a thread including the number "42" in the title, and you'll be proven wrong in the first 3 comments.

[–] knottn 2 days ago

Not to imply any particular comparison to less serious websites where the karma system over time may have resulted in a disproportionate surplus of one liner jokes and other spammy low quality posts.

[–] stygiansonic 2 days ago

When they find a CVE RCE in minesweeper then you know it’s all over

[–] mhh__ 2 days ago

Does windows even have minesweeper anymore

[–] kibwen 2 days ago

Yes, and it's 200+ MB: https://news.ycombinator.com/item?id=40647278

[–] accrual 2 days ago

Still able to happily play rounds of Minesweeper on my 286-16!

[–] steve1977 2 days ago

Not out of the box.

[–] linux2647 2 days ago

Turns out we were sweeping for CVEs, not mines, all along

[–] lakeviewterrace 2 days ago

Of course the valuable link is down-weighted/buried in the HN discussion...

  >Publicly disclosed
  >No

  >Exploited
  >No

  >Exploitability assessment
  >Exploitation Less Likely