CVE-2017-2107
Untrusted search path vulnerability in Self-extracting archive files created by 7-ZIP32.DLL 9.22.00.01 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2017-04-28
- Last modified
- 2024-08-05
- Weaknesses
- CWE-426
Affected products
References
- http://akky.xrea.jp/security/7-zip4.txt
- http://jvn.jp/en/jp/JVN86200862/index.html
- http://www.securityfocus.com/bid/96431
