Guru3D.com
  • HOME
  • NEWS
    • Channels
    • Archive
  • DOWNLOADS
    • New Downloads
    • Categories
    • Archive
  • GAME REVIEWS
  • ARTICLES
    • Rig of the Month
    • Join ROTM
    • PC Buyers Guide
    • Guru3D VGA Charts
    • Editorials
    • Dated content
  • HARDWARE REVIEWS
    • Videocards
    • Processors
    • Audio
    • Motherboards
    • Memory and Flash
    • SSD Storage
    • Chassis
    • Media Players
    • Power Supply
    • Laptop and Mobile
    • Smartphone
    • Networking
    • Keyboard Mouse
    • Cooling
    • Search articles
    • Knowledgebase
    • More Categories
  • FORUMS
  • NEWSLETTER
  • CONTACT

New Reviews
Razer Leviathan V2 gaming soundbar review
Guru3D NVMe Thermal Test - the heatsink vs. performance
EnGenius ECW220S 2x2 Cloud Access Point review
Alphacool Eisbaer Aurora HPE 360 LCS cooler review
Noctua NH-D12L CPU Cooler Review
Silicon Power XPOWER XS70 1TB NVMe SSD Review
Hyte Y60 chassis review
ASUS ROG Thor 1000W Platinum II (1000W PSU) review
ASUS ROG Rapture GT-AXE11000 WIFI6E router review
Backforce One Plus Gaming Chair review

New Downloads
CrystalDiskInfo 8.17 Download
AMD Radeon Software Adrenalin 22.6.1 Windows 7 driver download
ReShade download v5.2.2
HWiNFO Download v7.26
7-Zip v22.00 Download
GeForce 516.40 WHQL driver download
Intel ARC graphics Driver Download Version: 30.0.101.1736
AMD Radeon Software Adrenalin 22.5.2 WHQL driver download
Corsair Utility Engine Download (iCUE) Download v4.24.193
Intel HD graphics Driver Download Version: 30.0.101.1994


New Forum Topics
Up to 96 cores and 12 DDR5 memory channels with AMD Zen4-based server processors. GeForce GTX 1630 will launch on June 28 RDNA2 RX6000 Series Owners Thread, Tests, Mods, BIOS & Tweaks ! De-lidded AMD Ryzen 7 5800X3D Has Significant Thermal Improvements Collapse of crypto mining industry leads to auctioning off of thousands of graphics cards We need to talk about UE4 Shader compilation issues NVIDIA Profile Inspector 2.3.0.13 NVIDIA GeForce 516.40 WHQL driver download & Discussion Ryzen 7000X3D with 100 MB of cache already planned for this year AMD Radeon Software - UWP




Guru3D.com » News » 7-Zip compression program,software contains a severe vulnerability.

7-Zip compression program,software contains a severe vulnerability.

by Hilbert Hagedoorn on: 04/22/2022 06:39 PM | source: hd-tecnologia | 41 comment(s)
7-Zip compression program,software contains a severe vulnerability.

What makes the threat particularly dangerous is not just because it is being utilized, but also because it allows a person to remotely execute malware on an computer.

7-zip, one of the world's most popular file compressors, contains a zero-day vulnerability that might allow an attacker to get administrator access. Although compression software is available for many platforms, it appears that the CVE-2022-29072 flaw now affects just Windows users. The discoverer, a GitHub user called Kagancapar, detailed how the weakness works and provided a video illustrating how it may be abused. According to the researcher, the problem, which may be ascribed to the way the Windows assistance system works, is not solely the responsibility of the 7-Zip creators. An attacker just has to generate a file with the.7z extension, which, when dragged onto the program's help page, offers the ability to execute code on the system with administrator rights.


According to Kangacapar, the obligation of the designers of 7-Zip comes when, after dragging the file, the executable ends up with certain access capabilities that it should not have. The issue affects all Windows versions of the application, including the most recent (21.97), which has yet to be patched.

To protect yourself, remove the 7-zip.chm file from the program installation location or restrict its read and write rights. In the latter instance, the setting must be performed on all users who have access to the computer in order to ensure its security. Commenting on the issue, the fact that the problem has been made public should encourage the deployment of a remedy as soon as possible. The tool was released in 1999 as a free alternative to popular alternatives such as WinRAR and is now available in 89 languages for Windows, BSD, MacOS, Linux, and ReactOS.

 







« Review: Deepcool CK560 chassis · 7-Zip compression program,software contains a severe vulnerability. · Advertisement: April sale: best price Genuine lifetime computer software Windows 10 $12 and Office $25 »

9 pages « 3 4 5 6 > »


TheDeeGee
Senior Member



Posts: 7910
Joined: 2010-08-28

#6011640 Posted on: 04/23/2022 10:29 AM
Still using and have been using WinRar for decades. Going 7-zip would feel like cheating on my partner.

There are pretty neat skins for it as well.

rflair
Moderator



Posts: 4326
Joined: 2004-11-20

#6011668 Posted on: 04/23/2022 03:09 PM
7zip is open source is it not? Or freeware, can't remember.
If there is an exploit it will be fixed.
I've personally gone open-source with as many programs in Windows as possible. I also contribute a few $ their way, not much, but some.

Alessio1989
Senior Member



Posts: 2293
Joined: 2015-06-11

#6011670 Posted on: 04/23/2022 03:17 PM
7zip is open source is it not? Or freeware, can't remember.
If there is an exploit it will be fixed.
I've personally gone open-source with as many programs in Windows as possible. And yes I also contribute a few $ their way, not much, but some.
it's open source. some restrictions apply for the unrar code "thanks" to winrar (but this is for every archive management software that support winrar archives)

van_dammesque
Member



Posts: 37
Joined: 2004-11-18

#6011679 Posted on: 04/23/2022 04:40 PM
What are the best alternatives to this program besides WinRAR? I'm curious if I should try something else.

Powerarchiver.

Pictus
Senior Member



Posts: 190
Joined: 2015-03-20

#6011680 Posted on: 04/23/2022 04:43 PM
What are the best alternatives to this program besides WinRAR? I'm curious if I should try something else.

The free Double Commander has built-in RAR/7-Zip with a way better interface as it is a very capable file manager.
https://doublecommander.com/


9 pages « 3 4 5 6 > »


Post New Comment
Click here to post a comment for this news story on the message forum.


Guru3D.com © 2022