Download
| Alert*
oval:org.secpod.oval:def:43301
7-zip (32-bit) is installed oval:org.secpod.oval:def:47283 The host is installed with 7-zip before 18.0 and is prone to multiple memory corruption vulnerabilities. A flaw is present in the application, which fails to handle a crafted RAR archive. Successful exploitation could allow remote attackers to crash the service. oval:org.secpod.oval:def:45318 The host is installed with 7 zip 18.03 and earlier and is prone to a denial-of-service vulnerability. A flaw is present in the application, which fails to handle a crafted RAR archive. Successful exploitation could allow remote attackers to crash the service through the usage of uninitialized memory ... oval:org.secpod.oval:def:43306 The host is installed with 7-zip before 4.5.7 and is prone to an unspecified vulnerability. A flaw is present in the application, which fails to handle crafted data. Successful exploitation could allow attackers to cause unknown impact. oval:org.secpod.oval:def:43303 The host is installed with 7 zip through 16.2 and is prone to an untrusted search path vulnerability. A flaw is present in the application, which fails to handle a Trojan horse DLL. Successful exploitation could allow remote attackers to gain privileges. oval:org.secpod.oval:def:43305 The host is installed with 7 zip before 16.00 and is prone to a heap-based buffer overflow vulnerability. A flaw is present in the application, which fails to handle a crafted HFS+ image. Successful exploitation could allow attackers to execute arbitrary code. oval:org.secpod.oval:def:43304 The host is installed with 7 zip 9.20 and is prone to a denial of service vulnerability. A flaw is present in the application, which fails to handle the PartitionRef field in the Long Allocation Descriptor in a UDF file. Successful exploitation could allow attackers to crash the service. oval:org.secpod.oval:def:45297 The host is installed with 7 zip before 18.0 and is prone to a heap based buffer overflow vulnerability. A flaw is present in the application, which fails to handle a crafted ZIP archive. Successful exploitation could allow remote attackers to crash the service. oval:org.secpod.oval:def:45897 The host is installed with 7 zip through 18.01 and is prone to a security bypass vulnerability. A flaw is present in the application, which fails to properly implement the "Large memory pages" option. Successful exploitation could allow remote attackers to bypass intended access restrictions. |