Vulnerability · NVD

CVE-2007-4725

N/A Published on 2007-09-05

Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow.

EPSS 5.56% above median percentile 92.1%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

7-Zip Windows winget:7zip.7zip

Affected — Fixed in — Latest tracked 26.02 undetermined

Vulnerable CPE configurations (11)

Vendor	Product	Platform	Versions	CPE 2.3 URI
7-zip	7-zip All platforms (wildcard)	All platforms (wildcard)	≤4.42	cpe:2.3:a:7-zip:7-zip::::::::
7-zip	7-zip All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:7-zip:7-zip:4.43:beta::::::
7-zip	7-zip All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:7-zip:7-zip:4.44:beta::::::
7-zip	7-zip All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:7-zip:7-zip:4.45:beta::::::
7-zip	7-zip All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:7-zip:7-zip:4.46:beta::::::
7-zip	7-zip All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:7-zip:7-zip:4.47:beta::::::
7-zip	7-zip All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:7-zip:7-zip:4.48:beta::::::
7-zip	7-zip All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:7-zip:7-zip:4.49:beta::::::
7-zip	7-zip All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:7-zip:7-zip:4.50:beta::::::
7-zip	7-zip All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:7-zip:7-zip:4.51:beta::::::
7-zip	7-zip All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:7-zip:7-zip:4.52:beta::::::

View on NVD ↗