7-Zip up to 24.00 NTFS NtfsHandler.cpp out-of-bounds

Summaryinfo

A vulnerability was found in 7-Zip up to 24.00. It has been classified as problematic. This vulnerability affects unknown code of the file NtfsHandler.cpp of the component NTFS Handler. The manipulation leads to out-of-bounds. This vulnerability is uniquely identified as CVE-2023-52169. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in 7-Zip up to 24.00. This issue affects an unknown code block of the file NtfsHandler.cpp of the component NTFS Handler. The manipulation with an unknown input leads to a out-of-bounds vulnerability. Using CWE to declare the problem leads to CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality. The summary by CVE is:

The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in some known web-service use cases where untrusted users can upload files and have them extracted by a server-side 7-Zip process.

The advisory is shared at sourceforge.net. The identification of this vulnerability is CVE-2023-52169 since 12/29/2023. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 209231 (7-Zip < 24.01 Heap-based Buffer Overflow), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 24.01 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (209231) and CERT Bund (WID-SEC-2024-1516). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Affected

• Ubuntu Linux
• SUSE Linux
• NetApp ActiveIQ Unified Manager
• Open Source 7-Zip

Productinfo

Type

• File Compression Software

Name

• 7-Zip

Version

• 24

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion