| Package | Affected versions | Patched versions |
|---|---|---|
| 7-zip | < 18.00 | 18.00 |
| p7zip | < 18.0 | 18.0 |
Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free