Resource exhaustion in 7-Zip

CVE-2007-4725

Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.056 (92.0th percentile) — read the EPSS interpretation.

Affected products

  • 7-zip — versions 4.43, 4.44, 4.45
  • N/a — versions n/a

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (Third Party Advisory, x_refsource_JVN, third-party-advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cve@mitre.org (Product, Third Party Advisory, x_refsource_MISC)
  • cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
  • cve@mitre.org (x_refsource_CONFIRM, Broken Link)
  • cve@mitre.org (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)