7-Zip Vulnerability Update | High Risk ⚠

By Engineering Team In Uncategorized On May 08, 2018

Discover & Update Devices Vulnerable to the 7-Zip Threat
7-Zip Vulnerability Could Allow for Arbitrary Code Execution

Tackle This Threat

A vulnerability has been discovered in 7-Zip versions prior to 18.05, which could allow for arbitrary code execution.

Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights. There are currently no reports of this vulnerability being exploited in the wild.

The Solution

For those clients utilising our GDPR and RMM systems – no action is required as we have already pushed patches out.

For Anybody else – Download the latest version of 7-Zip and install – or completely remove the product.