LigH
12th May 2016, 13:43
Researchers of Talos (a Cisco subsidiary) reported security flaws in 7-zip (http://blog.talosintel.com/2016/05/multiple-7-zip-vulnerabilities.html) which may lead to executing malicious code out of specific disk image formats (UDF, HFS+) under certain conditions. The current version 16.00 fixed this vulnerability, but older 7-zip code may still be embedded or linked in many applications (e.g. Antivirus suites).