logo

[v2] EU-24-Tsai-WorstFit-Unveiling-Hidden-Transformers-in-Windows-ANSI

ID: 519fbd6a-1b09-4301-800b-a9ce920f967a

STIX ID: report--519fbd6a-1b09-4301-800b-a9ce920f967a

Threat Score

75/100

Uploaded: 2026-08-11

Published Date: 2025-01-13

Last Modified Date: 2025-01-13

Created by: dogesec

TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
### Executive summary: This Black Hat research presentation documents a class of Windows ANSI "Bestfit" character-mapping issues that enable filename smuggling, argument splitting, path traversal, and RCE across many applications and code pages; it provides PoCs and CVE references (notably CVE-2024-4577 and CVE-2024-49026), lists affected software and locales, and recommends mitigations (use wide-char APIs, prefer UTF-8/CJK locales) while noting ongoing disclosure and coordination with CERT/CC and MSRC.