BrikoX ( BrikoX@lemmy.zip ) M to Technology@lemmy.zipEnglish · 5 个月前Wide-ranging 7-zip vulnerability with 8.8 CVE rating allows for code execution — hundreds of millions of machines potentially at riskwww.tomshardware.comexternal-linkmessage-square6linkfedilinkarrow-up190file-text
arrow-up190external-linkWide-ranging 7-zip vulnerability with 8.8 CVE rating allows for code execution — hundreds of millions of machines potentially at riskwww.tomshardware.comBrikoX ( BrikoX@lemmy.zip ) M to Technology@lemmy.zipEnglish · 5 个月前message-square6linkfedilinkfile-text
minus-squareSteleTrovilo ( SteleTrovilo@beehaw.org ) linkfedilinkEnglisharrow-up5·5 个月前According to the last paragraph, the vulnerability is in reading the archive itself, not the decompressed contents.
minus-squareKactus ( Kactus@piefed.world ) linkfedilinkEnglisharrow-up3·5 个月前I think what quick snail is saying is that if you are going to download a malicious zip file you are just as likely to unzip the archive and run the program inside. It’s a lot easier to just have a malicious payload inside the archive.
According to the last paragraph, the vulnerability is in reading the archive itself, not the decompressed contents.
I think what quick snail is saying is that if you are going to download a malicious zip file you are just as likely to unzip the archive and run the program inside. It’s a lot easier to just have a malicious payload inside the archive.