CVE-2016-2334 in 7-zip
Summary
Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
02/12/2016
Disclosure
12/13/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 87307 | 7-zip ExtractZlibFile memory corruption | 119 | Unproven | Official fix | CVE-2016-2334 |