CVE-2016-4300

Integer overflow in the readSubStreamsInfo function in archivereadsupportformat7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow...

UBUNTU-CVE-2016-4300

Integer overflow in the readSubStreamsInfo function in archivereadsupportformat7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow...

libarchive 7zip read_SubStreamsInfo Function Heap Buffer Overflow Vulnerability

libarchive is a multi-format archive and compression library. A heap buffer overflow vulnerability exists in the 7zip readSubStreamsInfo function in libarchive version 3.1.2. An attacker can exploit this vulnerability with a specially crafted 7zip file to cause a denial of service memory...