Scintilla 1.73

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:scintilla:scintilla:1.73:*:*:*:*:*:*:*

part: a version: 1.73 update: *

VendorScintilla (7057abb6-fe23-5ba9-a5f0-b0fbb575b592)
ProductScintilla (ee038097-b482-5c3c-aa3d-9ec853e5075d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/luadist/scintilla purl2cpe 2026-06-01 10:16:32.497774
pkg:rpm/opensuse/scintilla purl2cpe 2026-06-01 10:16:32.497776
pkg:sourceforge/scintilla purl2cpe 2026-06-01 10:16:32.497777

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-2666 vulnerable 2026-06-08 04:49:45.715592 Details available
Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted remote attackers to execute arbitrary code via certain Ruby (.rb) files with long lines. NOTE: this was originally reported as a vulnerability in notepad++.
Published: 2007-05-14T23:00:00.000Z
Updated: 2024-08-07T13:49:56.939Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.