Vulnerability · Published Feb 2, 2024 · Assigned by VulDB

CVE-2024-1188Rizone Soft Notepad3 Encryption Passphrase denial of service

Low 3.3

In plain English

A low-severity security flaw in Notepad3 from Rizone Soft. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).

Severity (CVSS 3.1)3.3Low

Exploit odds (30 days)0.2%top 89.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability, which was classified as problematic, was found in Rizone Soft Notepad3 1.0.2.350. Affected is an unknown function of the component Encryption Passphrase Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-252678 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Rizone Soft	Notepad3	1.0.2.350

Weakness: CWE-404 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References

https://vuldb.com/?id.252678 vdb-entry
https://vuldb.com/?ctiid.252678 signature, permissions-required
https://fitoxs.com/vuldb/14-exploit-perl.txt exploit