Workaround for security issue in 7-Zip until it is fixed

[silversurfer]

Content source

https://www.ghacks.net/2022/04/18/workaround-for-security-issue-in-7-zip-until-it-is-fixed/

Recent versions of the open source archiver 7-Zip have a vulnerability that has not been fixed yet. Successful exploitation of the vulnerability allows privilege escalation and the execution of commands; it appears that the issue can be exploited locally only.

Filed under CVE-2022-29072, the vulnerability is using the included 7-Zip Help file, 7-zip.chm, for the exploit. Attackers need to drag and drop files with the 7z extension on to the Help > Contents area in the 7-Zip interface.

Vulnerability details have been published on GitHub. The page provides technical information and a short demonstration video of the exploit.

It is unclear if and when 7-Zip will address the issue. The last update of the application dates back to the release of 7-Zip in December 2021

Users of the application may use the following workaround to mitigate the vulnerability on their devices. Since it is using the included Help file, one way of dealing with the issue is to delete the Help file.

1. Open the 7-Zip installation directory or folder on the system. On Windows, these are usually C:\Program Files\7-Zip or C:\Program Files (x86)\7-Zip, depending on whether the 64-bit or the 32-bit version of the application has been installed.
2. Locate the file 7-Zip.chm; this is the help file. You can open it directly to display its content.
3. Hit the delete button on the keyboard or right-click on the file and select the Delete context menu option, to remove it from the system.
4. You may get a prompt, File Access Denied. If that is the case, select Continue.

The file is moved to the recycle bin of the operating system by default. 7-Zip functionality is not reduced when you delete the help file. The Help file won't open anymore after the deletion, when you select Help > Contents in the 7-Zip File Manager or press the F1-key on the keyboard.

Workaround for security issue in 7-Zip until it is fixed - gHacks Tech News

Recent versions of the open source archiver 7-Zip have a vulnerability that has not been fixed yet; a workaround is available, however.

www.ghacks.net

 

[upnorth]

Watch 163654035-d40ca72a-7dbc-425f-ade2-3820cfababb2 | Streamable

Watch "163654035-d40ca72a-7dbc-425f-ade2-3820cfababb2" on Streamable.

streamable.com

 

[show-Zi]

Bold and straightforward workaround!I deleted it just in case!

 

[ForgottenSeer 94654]

Meh. Not a cause for alarm or paranoia.

 

[M4RT1NE2]

Safer to use Explzh

 

[silversurfer]

Update 4/20/2022 7:50amPT: The listed 7zip CVE-2022-29072 vulnerability has now been marked as "disputed" in the official listing, and "multiple third parties have reported that no privilege escalation can occur." According to Google Project Zero vulnerability researcher Tavis Ormandy who alerted us to the dispute, this exploit could only occur by editing the registry and possibly other maneuvers (like adding another Local Administrator account). However, the description isn't clear enough to discern the method of attack. We'll keep you updated if the dispute is granted.

7-Zip App Vulnerability Grants Admin Privilege to Attackers (Update)

But while we wait for an update it is quite easy to mitigate.

www.tomshardware.com