Vulnetix
Try Vulnetix Request Demo
CVE-2023-52168 PUBLISHED CVSS 8.399999618530273 HIGH

The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.

EPSS 0.10% · 28.6th percentile

Risk Scores

CVSS v3.1
8.399999618530273
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
EPSS Score
0.10%
28.6th percentile

Affected Products

VendorProductVersions
ABBABB 800xA History <=7.0
ABBABB Production Response Batch History <=6.2
ABBABB 800xA for Symphony Plus Harmony <=6.2
ABBABB 800xA for AC 870P Melody <=6.2
ABBABB Application Change Management <=6.2
ABBABB Batch Management <=6.2

Timeline

References

Open in Interactive Console →