Exploit for Out-of-bounds Write in 7-Zip

This repository is an exploit module for CVE-2022-29072, a privilege escalation vulnerability in 7-Zip through version 21.07 on Windows. The vulnerability allows an attacker to execute commands with elevated privileges when a file with the .7z extension is dragged to the HelpContents area. The...

CVE-2022-29072

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the HelpContents area. This is caused by misconfiguration of 7z.dll and a heap overflow. The command runs in a child process under the 7zFM.exe process. NOTE: multiple...

7-zip - Code Execution / Local Privilege Escalation

Exploit Title: 7-zip - Code Execution / Local Privilege Escalation Exploit Author: Kağan Çapar Date: 2020-04-12 Vendor homepage: https://www.7-zip.org/ Software link: https://www.7-zip.org/a/7z2107-x64.msi Version: 21.07 and all versions Tested On: Windows 10 Pro x64 References:...

Exploit for Out-of-bounds Write in 7-Zip

CVE-2022-29072 7-Zip through 21.07 on Windows allows priv...

Exploit for Out-of-bounds Write in 7-Zip

7-Zip CVE 2022-29072 - Powershell Detection/Mitigation...

CVE-2022-29072

creationtimestamp| type| source ---|---|--- 2022-04-16 00:20:23+00:00| seen| https://t.me/cibsecurity/40967 2022-04-17 08:35:15+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1947 2022-04-17 13:42:19+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5824...

CVE-2022-29072

CVE-2022-29072 affects 7-Zip on Windows (up to 21.07). The root cause is described as a heap overflow in 7z.dll with misconfiguration, enabling privilege escalation and command execution when a user drags a .7z file to Help > Contents (executed in a child process of 7zFM.exe). Several public w...