New Notepad update fixes Vault 7 privacy vulnerabilities

Edward Hudson By: Edward Hudson
2 minute read

Home » News » New Notepad update fixes Vault 7 privacy vulnerabilities

Notepad++ is one of the most popular free source text editors for its ease of use. Supporting several languages, it runs in the MS Windows ecosystem under the GPL License and uses the Win32 API and STL. That means Notepad++ has a higher execution speed and smaller file size. Security-wise, the application was among the vulnerable software programs allegedly targeted by the CIA as part of its massive surveillance program.

Developers of Notepad++ have consequently rolled out version 7.3.3 of the program to fix the vulnerability found in the Vault 7 files leaked by Wikileaks. The files contained classified documents belonging to the CIA. More specifically, Vault 7 comprised a list of popular software programs being targeted by the intelligence agency.

In addition to Notepad++, targeted programs include Google Chrome, VLC Media Player, Firefox, Opera, Kaspersky TDSS Killer, Thunderbird, LibreOffice, and Skype. While it remains unclear when the other programs would get their respective patches, the Notepad++ 7.3.3 patch is now available.

Notepad++ Patch notes

The release notes:

  • Fix CIA Hacking Notepad++ issue (https://wikileaks.org/ciav7p1/cms/page_26968090.html).
  • Patch mouse wheel to task list scroll crash bug.
  • Fix flickering issue while switching back after modifying or deleting a document from outside.
  • Support Motorola S-Record, Intel and Tektronix extended hex file formats.
  • Improve multi-line tab: maintaining the selected tab position.
  • Fix add char into word char list bug.
  • Add Shift+Enter in Find dialog for searching in the opposite direction.
  • Fix a regression that delimiter settings is not retained correctly.
  • Add clear command button in shortcut mapper.
  • Enhancement: file extension supported in Load/Save Session dialog if a session file extension is set.

The hijacked DLL refers to scilexer.dll on an infected computer. The CIA allegedly built a modified scilexer.dll to replace the genuine DLL file once Notepad++ is launched. It prevents the user from detecting the data collection process while it runs in the background.

The new update works to check the certificate validation in scilexer.dll before loading it. Otherwise, Notepad++ will fail to launch. You can download the latest patch from the Notepad++ website.

RELATED STORIES YOU NEED TO CHECK OUT:

Join our community
windows report logo

Join our community of over 2 million active users and get the latest and most important Windows content on your email address.

Discussions

Next up

Computer is stuck on 169 IP address [FIX]

Elsie Otachi By: Elsie Otachi
5 minute read

Whenever you find your computer stuck on 169 IP address, this could generally mean either of the following: The DHCP server is temporarily unavailable The […]

Continue Reading

Solve Outlook cannot log on error on Windows 10

Milan Stanojevic avatar. By: Milan Stanojevic
9 minute read

Many users use Outlook as their preferred email client, but sometimes errors such as Outlook cannot log on can appear. This error will prevent you […]

Continue Reading

There was a problem running this tool: Windows 10 Media Creation Tool

Aleksandar Ognjanovic By: Aleksandar Ognjanovic
5 minute read

The software distribution is nowadays mostly digital, and even Microsoft changed they approach with Windows 10. However, Windows 10 Media Creation Tool, the best tool […]

Continue Reading