Hacker News new | past | comments | ask | show | jobs | submit
falcor84 | on: MS Paint Remote Code Execution Vulnerability
Wow! At first sight I was sure it was a joke, but no. What a time...

https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...

dboreham | parent | next
Presumably this is like many other graphics tool vulnerabilities this works by the attacker persuading a user to open a file that exercises the bug. Not terribly unusual.
loading story #50384520
dist-epoch | parent | next
This site doesn't do jokes
wolttam | root | parent | next
At least not about serious security matters
Sohcahtoa82 | root | parent | next
This site absolutely does jokes, it just doesn't beat horses into bloody pulps with the jokes the way reddit does. We have a higher standard. A joke has to actually be funny, and not some tired reference.

Except for the infamous Dropbox comment.

knottn | root | parent
Not to imply any particular comparison to less serious websites where the karma system over time may have resulted in a disproportionate surplus of one liner jokes and other spammy low quality posts.
stygiansonic | parent | next
When they find a CVE RCE in minesweeper then you know it’s all over
loading story #50385336
loading story #50385130
lakeviewterrace | parent
Of course the valuable link is down-weighted/buried in the HN discussion...

  >Publicly disclosed
  >No

  >Exploited
  >No

  >Exploitability assessment
  >Exploitation Less Likely