TRUMPF: Multiple products contain vulnerable version of 7-zip
view advisory published 2024-01-23
Under certain circumstances, opening a specially crafted 7-zip package can exploit an integer underflow vulnerability in 7-zip versions up to and including 22.x This vulnerability allows for a remote code execution, resulting in unauthorized (remote) access to, change of data or disruption of the whole service.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-31102US | high7.8 | — | ||
Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- Fixed
Please download the replacement tool. For additional questions please contact your TRUMPF Service with the PR number 501709.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan