CVE-2007-2666: Notepad++

High severity, CVSS 7.6. EPSS: 15.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted remote attackers to execute arbitrary code via certain Ruby (.rb) files with long lines. NOTE: this was originally reported as a vulnerability in notepad++.

Affected products

• Notepad++ Notepad++: up to and including 4.1.1
• Scintilla Scintilla: version 1.73 only

Published 2007-05-14. Last modified 2026-06-16.