CVE-2023-52169

The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 for 7zz contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in...

CVE-2023-52169

CVE-2023-52169 affects 7-Zip NTFS handling: the NtfsHandler.cpp reads beyond allocated buffers, which could cause information disclosure by presenting extra bytes as part of a filename in a file system image. The vulnerability is in 7-Zip before version 24.01 (for 7zz) and has been acknowledged i...

Microsoft LSASS Authentication Process Integer Overflow (MS09-059; CVE-2009-2524)

LSASS provides an interface for managing local security, domain authentication, and Active Directory service processes. It handles authentication for the client and for the server. An elevation of privilege vulnerability has been discovered in the Microsoft Windows Local Security Authority...