Denial of service and arbitrary code execution vulnerabilities in 7-Zip

Описание

Improper processing of UDF files was found in 7zip. By exploiting this vulnerability malicious users can cause a denial of service or execute arbitrary code. This vulnerability can be exploited remotely via specially crafted UDF file.

---

Technical details

This vulnerability related to CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp. It can be exploited via specially formed PartitionRef field in the Long Allocation Descriptor in a UDF file.

Первичный источник обнаружения

Связанные продукты

• 7-Zip

Список CVE

• CVE-2016-2335
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com