CVE-2017-17969

CVE-2017-17969 affects p7zip (7‑zip port) via a heap-based buffer overflow in NCompress::NShrink::CDecoder::CodeReal, exploitable when processing a crafted ZIP archive. The Debian advisory confirms a remote attacker can cause denial of service or potentially execute arbitrary code with the user’s...

CVE-2018-5996

The CVE-2018-5996 entry affects 7-Zip (and p7zip) with a flaw in NCompress::NRar3::CDecoder::Code prior to version 18.00 that allows remote attackers to trigger memory corruptions in the PPMd code via a crafted RAR archive, potentially causing a denial of service or arbitrary code execution. Conn...