Multiple 7-Zip Vulnerabilities Discovered

Re:Multiple 7-Zip Vulnerabilities Discovered by paulfr on Thursday May 12, 2016 @04:21PM (#11686458)

Not on Windows, at least. The properties dialog can tell you it uses HFS+ if you ask for it, but it's too late because the HFS+ code has already been executed.

[ Parent | on HN ]

Re:Multiple 7-Zip Vulnerabilities Discovered by colejohnson66 on Thursday May 12, 2016 @06:13PM (#11687224)

I meant when right clicking the archive am choosing "Extract to..." or something using Explorer's context menu.

[ Parent | on HN ]

Re:Multiple 7-Zip Vulnerabilities Discovered by paulfr on Thursday May 12, 2016 @06:33PM (#11687341)

Interesting, it does display a warning in this case! But it doesn't interrupt extraction so if it's a malicious file the code will still execute.

[ Parent | on HN ]