CVE-2016-2334: Buffer Overflow
Published Dec 13, 2016
·Updated
Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image.
Affected Software
4 affected components
7-Zip 7-Zip<=15.14
Fedoraproject Fedora=23
Fedoraproject Fedora=24
Oracle Solaris
Remediation
Event History
Dec 13, 2016
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-2334?
CVE-2016-2334 is classified as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2016-2334?
To fix CVE-2016-2334, you should update to version 16.00 or later of 7-Zip.
3
What software is affected by CVE-2016-2334?
CVE-2016-2334 affects 7-Zip versions prior to 16.00, as well as specific versions of Fedora and Oracle Solaris.
4
What type of vulnerability is CVE-2016-2334?
CVE-2016-2334 is a heap-based buffer overflow vulnerability.
5
Can CVE-2016-2334 be exploited remotely?
Yes, CVE-2016-2334 can be exploited by remote attackers through a crafted HFS+ image.