The Patching Friars' AlmanacA calendar of CVE saints

April 18

MagicDotHoly card for magicdot, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 file. . MagicDot PUNCTUM EVANESCIT
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint MagicDot, Illusionist of Dots

Patron of Windows paths, trailing dots and spaces, and files that are there but cannot be seen.

Life

In April 2024, at Black Hat Asia, Or Yair of SafeBreach presented MagicDot. When Windows converts old DOS-style paths, it silently strips trailing dots and spaces from names: a detail that let files and processes be hidden, or tools be confused, rootkit-style, without admin rights. Along the way he also found real vulnerabilities, including one in compressed-folder extraction, which Microsoft fixed.

Prayer

O Saint MagicDot, who makes files vanish with a single dot, let our systems call everything by its name, down to the last character. Amen.

How to celebrate

Celebrated by installing Windows updates and distrusting any file whose name ends in a dot.

One dot at the end, and the file is gone.

Technical record

Disclosed on
April 18 2024
CVE
CVE-2023-36396CVE-2023-32054CVE-2023-42757
CVSS
7.8
Product
Microsoft · Windows 11 version 22H2

Windows Compressed Folder Remote Code Execution Vulnerability

Sources: safebreach.com · blackhat.com

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.