KLA12514
PE vulnerability in 7-Zip

Обновлено: 22/06/2022
Дата обнаружения
15/04/2022
Уровень угрозы
Warning
Описание

Privilege escalation vulnerability was found in 7-Zip. Malicious users can exploit this vulnerability to gain privileges and execute arbitrary code by dragging and dropping file with the .7z extension to the Help>Contents area.
The vulnerability announced in version 21.07 and disputed by vendor.

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Пораженные продукты

7-Zip 21.07 and earlier

Решение

Update 7-Zip to the latest version when а new patch will be available

Первичный источник обнаружения
CVE-2022-29072
CVE-2022-29072 on GitHub
Оказываемое влияние
?
ACE 
[?]

PE 
[?]
Связанные продукты
7-Zip
CVE-IDS
Узнай статистику распространения уязвимостей в твоем регионе