ZDI-23-1165: 7-Zip 7Z File Parsing Integer Underflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is ZDI-23-1165.
What is the severity of the ZDI-23-1165 vulnerability?
The severity of the ZDI-23-1165 vulnerability is high, with a severity value of 7.8.
What is the affected software for the ZDI-23-1165 vulnerability?
The affected software for the ZDI-23-1165 vulnerability is 7-Zip 7-Zip.
How can this vulnerability be exploited?
This vulnerability can be exploited by remote attackers executing arbitrary code on affected installations of 7-Zip through user interaction such as visiting a malicious page or opening a malicious file.
Where can I find more information about the ZDI-23-1165 vulnerability?
You can find more information about the ZDI-23-1165 vulnerability at the following references: [1] http://www.zerodayinitiative.com/advisories/ZDI-23-1165/, [2] https://sourceforge.net/p/sevenzip/discussion/45797/thread/713c8a8269/, [3] https://www.zerodayinitiative.com/advisories/ZDI-23-1165/