CVE-2017-2107

Untrusted search path vulnerability in Self-extracting archive files created by 7-ZIP32.DLL 9.22.00.01 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
VendorProductVersion
akky7-zip32.dll
𝑥
≤ 9.22.00.01
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://akky.xrea.jp/security/7-zip4.txt
http://jvn.jp/en/jp/JVN86200862/index.html
http://www.securityfocus.com/bid/96431
http://akky.xrea.jp/security/7-zip4.txt
http://jvn.jp/en/jp/JVN86200862/index.html
http://www.securityfocus.com/bid/96431