A vulnerability in 7-Zip that allows gaining SYSTEM privileges in Windows.
A vulnerability (CVE-2022-29072) has been identified in the free archiver 7-Zip, allowing arbitrary commands to be executed with SYSTEM privileges by moving a specially crafted file with a .7z extension into the area with the prompt shown when opening the 'Help>Contents' menu. The issue only occurs on the Windows platform and is caused by a combination of incorrect configuration of the 7z.dll library and buffer overflow. Notably, after being notified of the issue, the 7-Zip developers […]
