Lucene search
+L

247 matches found

NVD
NVD
added 2018/01/30 4:29 p.m.18 views

CVE-2017-17969

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS8AI score0.04938EPSS
SaveExploits1References7
Prion
Prion
added 2018/01/30 4:29 p.m.21 views

Heap overflow

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

6.8CVSS8AI score0.04938EPSS
SaveExploits1References6Affected Software3
OSV
OSV
added 2018/01/30 4:29 p.m.6 views

AZL-6783 CVE-2017-17969 affecting package p7zip for versions less than 16.02-22

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS7.8AI score0.04938EPSS
SaveExploits1References1
OSV
OSV
added 2018/01/30 4:29 p.m.7 views

AZL-35092 CVE-2017-17969 affecting package p7zip for versions less than 16.02-23

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS7.8AI score0.04938EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2018/01/30 4:0 p.m.20 views

CVE-2017-17969

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

8.1AI score0.04938EPSS
SaveExploits1References7
CVE
CVE
added 2018/01/30 4:0 p.m.182 views

CVE-2017-17969

CVE-2017-17969 affects p7zip (7‑zip port) via a heap-based buffer overflow in NCompress::NShrink::CDecoder::CodeReal, exploitable when processing a crafted ZIP archive. The Debian advisory confirms a remote attacker can cause denial of service or potentially execute arbitrary code with the user’s...

7.8CVSS8AI score0.04938EPSS
SaveExploits1References7Affected Software2
Debian CVE
Debian CVE
added 2018/01/30 4:0 p.m.25 views

CVE-2017-17969

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS8.2AI score0.04938EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2018/01/30 12:0 a.m.41 views

CVE-2017-17969

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS7.4AI score0.04938EPSS
SaveExploits1References3
FreeBSD
FreeBSD
added 2018/01/23 12:0 a.m.29 views

p7zip -- heap-based buffer overflow

MITRE reports: Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service out-of-bounds write or potentially execute arbitrary code via a crafted ZIP archive...

7.8CVSS8.1AI score0.04938EPSS
SaveExploits1References4
FreeBSD
FreeBSD
added 2018/01/23 12:0 a.m.30 views

p7zip-codec-rar -- insufficient error handling

MITRE reports: Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, alows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafte...

7.8CVSS7.9AI score0.02851EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2016/12/13 10:59 p.m.47 views

CVE-2016-2334

Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image...

9.3CVSS7.4AI score0.14742EPSS
SaveExploits3References3
Cvelist
Cvelist
added 2016/12/13 10:0 p.m.23 views

CVE-2016-2334

Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image...

8.5AI score0.14742EPSS
SaveExploits3References9
CVE
CVE
added 2016/12/13 10:0 p.m.153 views

CVE-2016-2334

The CVE-2016-2334 issue affects 7-Zip (and p7zip) before version 16.00. A heap-based overflow in NArchive::NHfs::CHandler::ExtractZlibFile can allow remote code execution via a crafted HFS+ image. Remediation observed in connected advisories is to upgrade to 16.02 (or newer) to fix CVE-2016-2334/...

9.3CVSS8AI score0.14742EPSS
SaveExploits3References9Affected Software1
OpenVAS
OpenVAS
added 2016/12/07 12:0 a.m.22 views

Fedora Update for p7zip FEDORA-2016-1637001349

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.07016EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2016/12/05 12:0 a.m.26 views

Fedora Update for p7zip FEDORA-2016-d4573a5c53

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.07016EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2016/12/05 12:0 a.m.20 views

Fedora Update for p7zip FEDORA-2016-1ca07cdcde

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.07016EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2016/12/05 12:0 a.m.41 views

Fedora 23 : p7zip (2016-1ca07cdcde)

Security fix for CVE-2016-9296 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

7.5CVSS7.4AI score0.07016EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2016/12/05 12:0 a.m.30 views

Fedora 24 : p7zip (2016-d4573a5c53)

Security fix for CVE-2016-9296 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

7.5CVSS7.4AI score0.07016EPSS
SaveExploits1References2
Fedora
Fedora
added 2016/12/04 11:21 p.m.22 views

[SECURITY] Fedora 23 Update: p7zip-16.02-2.fc23

p7zip is a port of 7za.exe for Unix. 7-Zip is a file archiver with a very h igh compression ratio. The original version can be found at http://www.7-zip.or g/...

7.5CVSS1.1AI score0.07016EPSS
SaveExploits1
Fedora
Fedora
added 2016/12/04 5:25 a.m.27 views

[SECURITY] Fedora 24 Update: p7zip-16.02-2.fc24

p7zip is a port of 7za.exe for Unix. 7-Zip is a file archiver with a very h igh compression ratio. The original version can be found at http://www.7-zip.or g/...

7.5CVSS1.1AI score0.07016EPSS
SaveExploits1
Rows per page
Query Builder