News for hackers. Stuff that matters.

A comment on MS Paint Remote Code Execution Vulnerability. Parent comment

Re:MS Paint Remote Code Execution Vulnerability by eqvinox on Thursday November 05, 2026 @05:28PM (#50385403)
Reading tea leaves is still reading tea leaves, even if you make an AI do it… (which is what this is, judging by other things I've seen on opencve.io)
[ Parent | on HN ]
Re:MS Paint Remote Code Execution Vulnerability by jdiff on Thursday November 05, 2026 @07:51PM (#50386758)
Yeah, OpenCVE also includes this:

> After applying the update, verify that the target Windows systems are running a version that includes the CVE fix before disabling legacy file‑open processing in Paint.

Which is complete nonsense. "Legacy file-open processing" isn't a real configurable option in Paint and this seems to suggest that enabling it is some sort of mitigation. The resolution is simply to update Paint.

[ Parent | on HN ]