Unscored CVE-2016-7804 EUVD-2016-8653GHSA-6mh4-v7fh-gj6x

Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges via a Trojan horse DL…

Published May 22, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: Igor Pavlov Product: 7 Zip for Windows Platform: Windows

Description

Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

Vendor	Product	Affected	Fixed
Igor Pavlov	7 Zip for Windows	16.02 and earlier	—

References

JVNDB-2016-000211 third-party-advisory
JVN#76780067 third-party-advisory
http://www.7-zip.org/history.txt