Arbitrary code execution vulnerability in 7-Zip

Описание

A heap-based-overflow was found in 7-Zip before 16.00. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed HFS+ image.

---

Technical details

Vulnerability occurs in method NArchive::NHfs::CHandler::ExtractZlibFile.

Первичный источник обнаружения

Связанные продукты

• 7-Zip

Список CVE

• CVE-2016-2334
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com