<![CDATA[Nessus reports vulnerability “Microsoft Windows Unquoted Service Path Enumeration”]]>Our regular security scans are screaming about the vulnerability “Microsoft Windows Unquoted Service Path Enumeration” (Nessus plugin ID 63155).

The installer doesn’t quote the uninstall string appropriately.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Notepad++\UninstallString is

C:\Program Files\Notepad++\uninstall.exe

when it should be

“C:\Program Files\Notepad++\uninstall.exe”

And similarly in wow64node for 32-bit version.

Can you please tweak the installer to quote this so that people don’t have to waste time “remediating” this?

Phil

]]>https://community.notepad-plus-plus.org/topic/18279/nessus-reports-vulnerability-microsoft-windows-unquoted-service-path-enumerationRSS for NodeSat, 11 Jul 2026 10:52:09 GMTFri, 20 Sep 2019 14:54:47 GMT60<![CDATA[Reply to Nessus reports vulnerability “Microsoft Windows Unquoted Service Path Enumeration” on Fri, 20 Sep 2019 15:05:07 GMT]]>@Phil-Randal see here.

]]>https://community.notepad-plus-plus.org/post/47283https://community.notepad-plus-plus.org/post/47283Fri, 20 Sep 2019 15:05:07 GMT