PE vulnerability in 7-Zip

Beschreibung

Privilege escalation vulnerability was found in 7-Zip. Malicious users can exploit this vulnerability to gain privileges and execute arbitrary code by dragging and dropping file with the .7z extension to the Help>Contents area.
The vulnerability announced in version 21.07 and disputed by vendor.

Ursprüngliche Informationshinweise

• CVE-2022-29072

• CVE-2022-29072 on GitHub

Ausnutzung

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Betroffene Produkte

• 7-Zip

CVE Liste

• CVE-2022-29072
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com