VDB

GCVE-110-MAGEIA-2018-123

GCVE-110-MAGEIA-2018-123
Advisory Published
Vulnetix · Advisory published February 8, 2018
Heap-based buffer overflow vulnerability in the NCompress::NShrink::CDecoder::CodeReal method in p7zip. A remote attacker can take advantage of this flaw to cause a denial-of-service or, potentially the execution of arbitrary code with the privileges of the user running p7zip, if a specially crafted shrinked ZIP archive is processed (CVE-2017-17969).

Affected Products

VendorProductVersionsPlatforms
Mageiap7zip0 (affected), 16.02-2.1.mga6 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›