Published: 13/12/2016 Updated: 07/11/2023

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 829

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip prior to 16.00 and p7zip allows remote malicious users to execute arbitrary code via a crafted HFS+ image.

Vulnerable Product	Search on Vulmon	Subscribe to Product
7-zip 7-zip
fedoraproject fedora 24
fedoraproject fedora 23
oracle solaris

Debian Bug report logs - #824160 p7zip: CVE-2016-2334 CVE-2016-2335 Package: src:p7zip; Maintainer for src:p7zip is Robert Luberda <robert@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 13 May 2016 05:06:02 UTC Severity: grave Tags: fixed-upstream, security, upstream Found in versions ...

Инструкция по сборке пакетов для Росы. Создается сообществом. Коммиты приветствуются. Для визуального редактирования Markdown рекомендуем редактор Remarkable: https://remarkableapp.github.io/linux.html

СБОРКА И ОБНОВЛЕНИЕ ПРОГРАММ В ОС «РОСА Linux» (Дидактические материалы) Россия, 2017г Автор: Владимир Шаронин Введение «Проба пера» "Сделай сам"- Howto для желающих обновлять программы в РОСЕ Запро

Exploiting CVE-2016-2334 7zip HFS+ vulnerability

Exploiting CVE-2016-2334 7zip HFS+ vulnerability hfsGeneratorpy Script used to generate HFS+ file heapjs WinDbg js script After loading script, setup allocation hook in the following way: bp ntdll!RtlAllocateHeap "pt "dx DebuggerStateScriptsheapContentshandleRtlHeapAlloc();g"" Next you can list heap chunks with information about allocated there

CWE-119 http://www.talosintel.com/reports/TALOS-2016-0093/http://www.securityfocus.com/bid/90531 http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html http://www.securitytracker.com/id/1035876 http://blog.talosintel.com/2016/05/multiple-7-zip-vulnerabilities.html https://security.gentoo.org/glsa/201701-27 http://blog.talosintelligence.com/2017/11/exploiting-cve-2016-2334.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DTGWICT3KYYDPDXRNO5SXD32GZICGRIR/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DNYIQAU3FKFBNFPK6GKYTSVRHQA7PTYT/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=824160 https://nvd.nist.gov https://github.com/mikhailnov/rosa-building-guide

CVE-2016-2334

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect