PE vulnerability in 7-Zip

Описание

Privilege escalation vulnerability was found in 7-Zip. Malicious users can exploit this vulnerability to gain privileges and execute arbitrary code by dragging and dropping file with the .7z extension to the Help>Contents area.
The vulnerability announced in version 21.07 and disputed by vendor.

Первичный источник обнаружения

• CVE-2022-29072
  CVE-2022-29072 on GitHub
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• 7-Zip

Список CVE

• CVE-2022-29072
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com