Vulnerabilities

TI-2016-06556 CVE-2016-7804 · GHSA-6mh4-v7fh-gj6x

Untrusted search path in Igor Pavlov 7 Zip for Windows

LOW 38

Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01811 Published 2017-05-22 No fix listed CWE-426

TI-2005-02882 CVE-2005-3051 · GHSA-9m2q-w2xh-85rg

Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and…

MEDIUM 49

Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26 BETA, as used in products including Turbo Searcher, allows remote attackers to execute arbitrary code via a large ARJ block.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06053 Published 2005-09-23 No fix listed CWE-119

Vulnerabilities

Filters

Untrusted search path in Igor Pavlov 7 Zip for Windows

Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and…