Arbitrary Code Execution

2023-08-3116:16:16

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

arbitrary code execution

7zip

remote attack

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.7%

JSON

7zip is vulnerable to Arbitrary Code Execution. This vulnerability exists due to a flaw in the way 7-Zip parses 7Z files. A remote attacker can exploit this vulnerability by tricking the victim to open a specially crafted archive, which could lead to arbitrary code execution on the victim’s system