CVE-2007-4725 Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via....
MediumCVSS 6.8
EPSS 5.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 7-Zip | <= 4.42 | No fix listed |
| 7-Zip | = 4.43-beta | No fix listed |
| 7-Zip | = 4.44-beta | No fix listed |
| 7-Zip | = 4.45-beta | No fix listed |
| 7-Zip | = 4.46-beta | No fix listed |
| 7-Zip | = 4.47-beta | No fix listed |
| 7-Zip | = 4.48-beta | No fix listed |
| 7-Zip | = 4.49-beta | No fix listed |
| 7-Zip | = 4.50-beta | No fix listed |
| 7-Zip | = 4.51-beta | No fix listed |
| 7-Zip | = 4.52-beta | No fix listed |
References
- akky.cjb.net broken-link
- JVN#62868899 third-party-advisory
- 40482 broken-link vdb-entry
- 26624 third-party-advisory
- sourceforge.net product third-party-advisory
- 25545 third-party-advisory vdb-entry
- ADV-2007-3086 third-party-advisory vdb-entry
- akkywarehouse-zip-bo(36459) third-party-advisory vdb-entry