logo

Database

Out-of-bounds read In p7zip

Description

Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2016-23342. NVD-2016-23343. OSV-DEBIAN-2016-23344. OSV-2016-23345. SECURITY-TRACKER-CVE-2016-2334

References

1. https://github.com/icewall/CVE-2016-2334

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.