News for hackers. Stuff that matters.

A comment on Multiple 7-Zip Vulnerabilities Discovered. Parent comment

Re:Multiple 7-Zip Vulnerabilities Discovered by colejohnson66 on Thursday May 12, 2016 @03:35PM (#11686101)
IIRC, 7-zip does tell you if the actual format is different. At least it does when I extract some DMGs; it tells me it's actually an HFS "file".
[ Parent | on HN ]
Re:Multiple 7-Zip Vulnerabilities Discovered by paulfr on Thursday May 12, 2016 @04:21PM (#11686458)
Not on Windows, at least. The properties dialog can tell you it uses HFS+ if you ask for it, but it's too late because the HFS+ code has already been executed.
[ Parent | on HN ]
Re:Multiple 7-Zip Vulnerabilities Discovered by colejohnson66 on Thursday May 12, 2016 @06:13PM (#11687224)
I meant when right clicking the archive am choosing "Extract to..." or something using Explorer's context menu.
[ Parent | on HN ]
Re:Multiple 7-Zip Vulnerabilities Discovered by paulfr on Thursday May 12, 2016 @06:33PM (#11687341)
Interesting, it does display a warning in this case! But it doesn't interrupt extraction so if it's a malicious file the code will still execute.
[ Parent | on HN ]