3 ms·
This involves dragging-and-dropping files onto the Help window, not 7-zip proper. This is something nobody ever does, so it’s a classic overblown “vulnerability
by Kwpolska 5y ago
This involves dragging-and-dropping files onto the Help window, not 7-zip proper. This is something nobody ever does, so it’s a classic overblown “vulnerability”.
- zhfliz 5y agowhile it's certainly something that's unlikely to be exploited by a remote attacker, local privilege escalation is a real issue. details on the LPE are not yet released, it's only shown in the video. assuming the LPE is real and also caused by 7-zip, this is a critical issue for anyone that has unprivileged users use their systems where 7-zip is installed.