Igor Pavlov · 7-Zip · CVE-2018-5996
Name of the Vulnerable Software and Affected Versions:
7-Zip versions prior to 18.00
p7zip versions prior to 18.00
Description:
The issue is related to insufficient exception handling in the method NCompress::NRar3::CDecoder::Code, which can lead to multiple memory corruptions within the PPMd code. This allows remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.
Recommendations:
For 7-Zip versions prior to 18.00, update to version 18.00 or later to resolve the issue.
For p7zip versions prior to 18.00, update to version 18.00 or later to resolve the issue.