PT-2016-5119
CVE-2016-2334
·
Published
2016-12-13
·
Updated
2024-06-15
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
7zip versions prior to 16.00
p7zip versions prior to 16.00
Description
The issue is related to a heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method. This allows remote attackers to execute arbitrary code via a crafted HFS+ image.
Recommendations
For 7zip versions prior to 16.00, update to version 16.00 or later.
For p7zip versions prior to 16.00, update to version 16.00 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾