** DISPUTED ** 7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area. This is caused by misconfiguration of 7z.dll and a heap overflow. The command runs in a child process under the 7zFM.exe process. NOTE: multiple third parties have reported that no privilege escalation can occur.
| CVE Infomation | Exploits or more Infomation |
|---|---|
| mitre | EXPLOIT DATABASE |
| NVD | 0day.today |
| vulmon.com | github |
| CVE Details | |
| JVN ENG JPN | |
| Reconshell |
Software Tag:
List of frequently cited URLs
| User | URL | Info Source | Date |
|---|---|---|---|
| wdormann | https://nvd.nist.gov/vuln/detail/cve-2022-29072 | Source wdormann 1646496206028173312 | 2023/04/13 |
| wdormann | https://twitter.com/wdormann/status/1646496206028173312/pho... | Source wdormann 1646496206028173312 | 2023/04/13 |
List of frequently cited URLs
| URL | Num of Times Referred to |
|---|---|
| cvetrends.com | 54 |
| www.exploit-db | 14 |
| securityonline.info | 5 |
| news.ycombinator.com | 5 |
| tweetedtimes.com | 4 |
| www.nichepcgamer.com | 4 |
| github.com | 3 |
| twitter.com | 3 |
| socprime.com | 3 |
| www.techspot.com | 3 |
| User | URL | Info Source |
|---|---|---|
| wdormann | nvd.nist.gov | Show Tweet |
| wdormann | twitter.com | Show Tweet |
| Name | URL |
|---|---|
| kagancapar/CVE-2022-29072 | https://github.com/kagancapar/CVE-2022-29072 |
| sentinelblue/CVE-2022-29072 | https://github.com/sentinelblue/CVE-2022-29072 |
| tiktb8/CVE-2022-29072 | https://github.com/tiktb8/CVE-2022-29072 |
| Name | URL |
|---|---|
| kagancapar/CVE-2022-29072 | github.com |
| sentinelblue/CVE-2022-29072 | github.com |
| tiktb8/CVE-2022-29072 | github.com |