Denial of service and arbitrary code execution vulnerabilities in 7-Zip

Description

Improper processing of UDF files was found in 7zip. By exploiting this vulnerability malicious users can cause a denial of service or execute arbitrary code. This vulnerability can be exploited remotely via specially crafted UDF file.

---

Technical details

This vulnerability related to CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp. It can be exploited via specially formed PartitionRef field in the Long Allocation Descriptor in a UDF file.

Original advisories

Related products

• 7-Zip

CVE list

• CVE-2016-2335
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com