[v2] EU-24-Tsai-WorstFit-Unveiling-Hidden-Transformers-in-Windows-ANSI
ID: 519fbd6a-1b09-4301-800b-a9ce920f967a
STIX ID: report--519fbd6a-1b09-4301-800b-a9ce920f967a
Threat Score
75/100
Uploaded: 2026-08-11
Published Date: 2025-01-13
Last Modified Date: 2025-01-13
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
### Executive summary: This Black Hat research presentation documents a class of Windows ANSI "Bestfit" character-mapping issues that enable filename smuggling, argument splitting, path traversal, and RCE across many applications and code pages; it provides PoCs and CVE references (notably CVE-2024-4577 and CVE-2024-49026), lists affected software and locales, and recommends mitigations (use wide-char APIs, prefer UTF-8/CJK locales) while noting ongoing disclosure and coordination with CERT/CC and MSRC.
