CVE-2016-2335

概要

参考情報

• blog.talosintel.com/2016/05/multiple-7-zip-vulnerabilities.html · Exploit
• lists.opensuse.org/opensuse-updates/2016-06/msg00004.html · Mailing List
• lists.opensuse.org/opensuse-updates/2016-06/msg00098.html · Mailing List
• lists.opensuse.org/opensuse-updates/2016-07/msg00069.html · Mailing List
• debian.org/security/2016/dsa-3599 · Third Party Advisory
• oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html · Third Party Advisory
• securityfocus.com/bid/90531 · Third Party Advisory
• securitytracker.com/id/1035876 · Third Party Advisory
• talosintel.com/reports/TALOS-2016-0094 · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DNYIQAU3FKFBNFPK6GKYTSVRHQA7PTYT

7-zip のその他の脆弱性

• CVE-2026-14266高 7.87-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
• CVE-2026-58052低 3.37-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppres…
• CVE-2026-48112中 6.57-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BS…
• CVE-2026-48111高 7.17-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability i…
• CVE-2026-48104中 4.27-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain an uninitialized heap read in the SquashFS archi…