CVE-2017-17969

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securitytracker.com/id/1040831
https://0patch.blogspot.si/2018/02/two-interesting-micropatches-for-7-zip.html
https://github.com/p7zip-project/p7zip/issues/7
https://landave.io/2018/01/7-zip-multiple-memory-corruptions-via-rar-and-zip/Exploit, Technical Description, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/02/msg00003.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/3913-1/
https://www.debian.org/security/2018/dsa-4104Third Party Advisory
http://www.securitytracker.com/id/1040831
https://0patch.blogspot.si/2018/02/two-interesting-micropatches-for-7-zip.html
https://landave.io/2018/01/7-zip-multiple-memory-corruptions-via-rar-and-zip/Exploit, Technical Description, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/02/msg00003.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/3913-1/
https://www.debian.org/security/2018/dsa-4104Third Party Advisory

Timeline

Published: Jan 30, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-179709.8Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to CVE-2017-179716.1The test_sql_and_script_inject function in htdocs/main.inc.php in Dolibarr ERP/CRM 6.0.4 blocks some event attributes but neither onclick no CVE-2017-179726.1packages/subjects/pub/subjects.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?subjecttypeid=xxx request, aka Open CVE-2017-179738.8In LibTIFF 4.0.8, there is a heap-based use-after-free in the t2p_writeproc function in tiff2pdf.c. NOTE: there is a third-party report of i CVE-2017-179749.8BA SYSTEMS BAS Web on BAS920 devices (with Firmware 01.01.00*, HTTPserv 00002, and Script 02.*) and ISC2000 devices allows remote attackers CVE-2017-179755.5Use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel through 4.14.10 allows attackers to c CVE-2017-179769.8In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.CVE-2017-179815.4PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter.CVE-2017-179826.8PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php.CVE-2017-179838.8PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem_id parameter.CVE-2017-179844.8PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter.CVE-2017-179854.8PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter.