PE vulnerability in 7-Zip

Descripción

Privilege escalation vulnerability was found in 7-Zip. Malicious users can exploit this vulnerability to gain privileges and execute arbitrary code by dragging and dropping file with the .7z extension to the Help>Contents area.
The vulnerability announced in version 21.07 and disputed by vendor.

Notas informativas originales

• CVE-2022-29072

• CVE-2022-29072 on GitHub

Explotación

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Productos relacionados

• 7-Zip

Lista CVE

• CVE-2022-29072
  critical

Leer más

Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com