I don't think so:
reply> User Interaction: None
> Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.
> An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network.
replyWhat server is MS Paint running or what services does it provide?
Edit: Apparently you can use it to print an image from the command-line. Is that how this is being exploited?
MS Paint has Copilot now
replyDoes that turn it into a server or service?
replyI'm no expert but so much of Windows is implemented as services. svchost.exe is probably involved somehow. Like it wouldn't surprise me if Copilot is implemented as a service and it talks to Paint via IPC messages or something
replyBut that alone wouldn't make the service listen on the network, even if it were the case.
replyIt would make sense that it could listen for messages like "your generated image is ready!" and pass bitmap data to Paint. And media like images are a common source of vulnerabilities since you're basically passing binary data into the software.
replyIIS (Internet Impasto Server)
reply