News for hackers. Stuff that matters.

A comment on MS Paint Remote Code Execution Vulnerability. Parent comment

Re:MS Paint Remote Code Execution Vulnerability by dboreham on Thursday November 05, 2026 @04:06PM (#50384456)
Presumably this is like many other graphics tool vulnerabilities this works by the attacker persuading a user to open a file that exercises the bug. Not terribly unusual.
[ Parent | on HN ]
Re:MS Paint Remote Code Execution Vulnerability by yread on Thursday November 05, 2026 @04:13PM (#50384520)
I don't think so:

> User Interaction: None

> Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.

[ Parent | on HN ]
Re:MS Paint Remote Code Execution Vulnerability by criddell on Thursday November 05, 2026 @04:26PM (#50384679)
[delayed]
[ Parent | on HN ]
Re:MS Paint Remote Code Execution Vulnerability by lakeviewterrace on Thursday November 05, 2026 @04:40PM (#50384835)
IIS (Internet Impasto Server)
[ Parent | on HN ]
Re:MS Paint Remote Code Execution Vulnerability by 80fj0348i on Thursday November 05, 2026 @04:47PM (#50384919)
MS Paint has Copilot now
[ Parent | on HN ]
Re:MS Paint Remote Code Execution Vulnerability by criddell on Thursday November 05, 2026 @04:58PM (#50385068)
[delayed]
[ Parent | on HN ]
Re:MS Paint Remote Code Execution Vulnerability by 80fj0348i on Thursday November 05, 2026 @05:34PM (#50385475)
I'm no expert but so much of Windows is implemented as services. svchost.exe is probably involved somehow. Like it wouldn't surprise me if Copilot is implemented as a service and it talks to Paint via IPC messages or something
[ Parent | on HN ]
Re:MS Paint Remote Code Execution Vulnerability by steve1977 on Thursday November 05, 2026 @05:48PM (#50385619)
But that alone wouldn't make the service listen on the network, even if it were the case.
[ Parent | on HN ]
Re:MS Paint Remote Code Execution Vulnerability by 80fj0348i on Thursday November 05, 2026 @08:02PM (#50386849)
It would make sense that it could listen for messages like "your generated image is ready!" and pass bitmap data to Paint. And media like images are a common source of vulnerabilities since you're basically passing binary data into the software.
[ Parent | on HN ]