Vulnerability Bulletins |
DSA-3599 p7zip - security update |
|
| Affected software | Debian |
|
Marcin Icewall Noga of Cisco Talos discovered an out-of-bound readvulnerability in the CInArchive::ReadFileItem method in p7zip, a 7zrfile archiver with high compression ratio. A remote attacker can takeadvantage of this flaw to cause a denial-of-service or, potentially theexecution of arbitrary code with the privileges of the user runningp7zip, if a specially crafted UDF file is processed. More info: https://www.debian.org/security/2016/dsa-3599 |
|