3 ms·
This looks more like a bug in Windows help system than 7zip. At least it's easy to avoid, although dragging and dropping files in 7zip is an expected operation
by Pxtl 5y ago
This looks more like a bug in Windows help system than 7zip. At least it's easy to avoid, although dragging and dropping files in 7zip is an expected operation, I don't think people are opening their "help" often.
I wonder how many programs have this bug? How many programs have Windows help and involve dragging and dropping files?
- Kwpolska 5y agoThis involves dragging-and-dropping files onto the Help window, not 7-zip proper. This is something nobody ever does, so it’s a classic overblown “vulnerability”.
- zhfliz 5y agowhile it's certainly something that's unlikely to be exploited by a remote attacker, local privilege escalation is a real issue. details on the LPE are not yet released, it's only shown in the video. assuming the LPE is real and also caused by 7-zip, this is a critical issue for anyone that has unprivileged users use their systems where 7-zip is installed.