CVE-2024-11477

A newly discovered vulnerability in 7-Zip, a widely used file compression utility, has raised significant cybersecurity concerns. Tracked as CVE-2024-11477, this flaw allows attackers to execute malicious code through specially crafted archive files. Watch the video till the…

So I spent some time trying to make a video about CVE-2024-11477, a vulnerability in 7-zip. This led my down a wild rabbit hole of patch diffing, software fuzzing, and ultimately crashing 7-zip over 4000 times. Check it out.

Обнаружена новая уязвимость в архиваторе 7-Zip, которая может позволить злоумышленникам запустить вредоносный код на вашем компьютере. Проблема кроется в компоненте разуплотнения Zstandard и уже получила официальный идентификатор CVE-2024-11477: https://t.co/0CwveaiDdS #7Zip #ИБ

🚨 Celah Keamanan 7-Zip (CVE-2024-11477) 🚨 Ada bug di fungsi dekompresi Zstandard (CVSS 7.8) yang bisa dimanfaatkan hacker untuk menjalankan kode berbahaya lewat file yg sudah dimodif. Segera update ke versi 24.07+ biar aman! #KeamananSiber #7Zip https://t.co/oKMuJP38LY

CVE-2024-11477、『7-Zip Zstandard Decompression Integer Underflow 「Remote」 Code Execution Vulnerability』と銘打っておいて、Attack Vector (AV): Local なのちょっと面白い。アーカイバとしての使われ方を考慮？ https://t.co/U1uyYFgxn5

CVE-2024-11477: 7-Zip Vulnerability Allows Remote Code Execution, Update Now! https://t.co/701SFKSBkY

CVE-2024-11477 - looks like a signness issue in the Zstd Decoder

CVE-2024-11477: 7-Zip Vulnerability Allows Remote Code Execution, Update Now! https://t.co/1wmwjbjkZ8

[Sécurité] Exploit RCE CVE-2024-11477 découvert sur 7Zip Le célèbre logiciel de décompression open source 7Zip à un exploit RCE critique sur sont système de décompression https://t.co/U8n4F1J6BX Author : SaoriYuki

CVE-2024-11477: 7-Zip Vulnerability Allows Remote Code Execution, Update Now! https://t.co/U0VMv6HJSU

A critical vulnerability (CVE-2024-11477) in 7-Zip enables remote code execution due to insufficient validation of user-supplied data. ⚠️ #cybersecurity #vulnerability #7Zip https://t.co/Uc4zsjQQll https://t.co/Uc4zsjQQll

Attention 7-Zip users! A critical vulnerability (CVE-2024-11477) has been discovered that may allow the execution of malicious code when opening compromised files. It is recommended to update to the latest version (24.07 or higher). #Security #MandatoryUpdate #7Zip https://t.co/

⚠️ 7-Zip RCE Vulnerability CVE-2024-11477: CVE-2024-11477: An integer underflow vulnerability in 7-Zip’s Zstandard decompression function (CVSS 7.8) allows attackers to execute malicious code. ❕ Users are advised to update to 7-Zip version 24.07 or later.

آسیب پذیری بحرانی CVE-2024-11477 در 7Zip https://t.co/z54lJ11Bxd

😮 CVE-2024-11477: 7-Zip Vulnerability Allows Remote Code Execution, Update Now! https://t.co/5zHy9AilKm via @the_yellow_fall

CVE-2024-11477: Critical Flaw in 7-Zip Allows Hackers to Take Control A vulnerability has been discovered in the 7-Zip file compression tool, enabling attackers to remotely execute malicious code through specially crafted archives https://t.co/8wdaEVGJOW #CyberSecurity #7zip…

CVE-2024-11477: 7-Zip Vulnerability Allows Remote Code Execution, Update Now! はてなブックマーク テクノロジー新着 https://t.co/6wDV9fMSLG

CVE-2024-11477: Critical Flaw in 7-Zip Allows Hackers to Take Control A vulnerability has been discovered in the 7-Zip file compression tool, enabling attackers to remotely execute malicious code through specially crafted archives https://t.co/CVQekrwGtG

Top 5 Trending CVEs: 1 - CVE-2024-46938 2 - CVE-2024-37397 3 - CVE-2024-42477 4 - CVE-2024-11477 5 - CVE-2024-0012 #cve #cvetrends #cveshield #cybersecurity https://t.co/4Fua3CAN6W

یک آسیب‌پذیری سطح بالا (CVE-2024-11477) توی 7-Zip پیدا شده که اجازه اجرای کد‌های مخرب از راه دور رو به مهاجم‌ها میده. این‌رو «نیکلاس زوبریسکی» از تیم ترند میکرو پیدا کرده و مربوط به عملکرد Zstandard decompression میشه. پیشنهاد میشه 7-Zip روبه نسخه 24.07 یا بالاتر آپدیت کنید. http

【リンク集：11月22日~25日のセキュリティ関連ニュース/記事】 ＜脆弱性＞ ・CVE-2024-9511（CVSS 9.8）：FluentSMTPプラグインにおける重大な欠陥により、30万超のWordPressサイトが乗っ取られる恐れ https://t.co/YcHjmSp1X8 ・CVE-2024-11477：7-Zipの脆弱性でリモートコード実行が可能に… https://t.co/TmuGmvuZCB

🚨 Critical Vulnerability in 7-Zip A high-risk flaw (CVE-2024-11477) has been found in 7-Zip, allowing attackers to execute malicious code via crafted archives. With a CVSS score of 7.8, users should update immediately to stay protected. #CyberSecurity #7Zip #Vulnerability htt

CVE-2024-11477: 7-Zip Vulnerability Allows Remote Code Execution, Update Now! https://t.co/nnl1BNzN2N @the_yellow_fallより

7-ZipをPCにインストールしちゃってる場合、最新のを適用しときましょう / CVE-2024-11477: 7-Zip Vulnerability Allows Remote Code Execution, Update Now! https://t.co/DW6iHkaPLN #bookmark — 量産型IGALOG (@igaos) Nov 25, 2024 November 25, 2024 at 02:14PM… https://t.co/0WFsKkUa05

CVE-2024-11477: 7-Zip Vulnerability Allows Remote Code Execution, Update Now! https://t.co/VZztOC0LCS

7-ZipをPCにインストールしちゃってる場合、最新のを適用しときましょう / CVE-2024-11477: 7-Zip Vulnerability Allows Remote Code Execution, Update Now! https://t.co/DW6iHkaPLN #bookmark

CVE-2024-11477: 7-Zip Vulnerability Allows Remote Code Execution https://t.co/7WTVH56NzT

7-Zipに遠隔コード実行の脆弱性。CVE-2024-11477はCVSSスコア7.8で、細工されたアーカイブを開いた場合発現の可能性。Zstd解凍時の整数アンダーフロー。バージョン24.04で修正済み。 https://t.co/hSZe8XutDI

7-Zip Vulnerability Allows Remote Code Execution, Update Now! 7-Zip vulnerability (CVE-2024-11477): understand the risks and learn how to safeguard your systems from potential code execution attacks https://t.co/vkDyUqzd0c

🗣 CVE-2024-11477: 7-Zip Vulnerability Allows Remote Code Execution, Update Now! https://t.co/yNgY40yon0

CVE-2024-11477 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected … https://t.co/8l9L4M5ypF

🚨 7-Zip Vulnerability (CVE-2024-11477) 🚨 A remote code execution flaw in 7-Zip (versions < 24.07) was fixed in June 2024. Attackers could exploit it to run arbitrary code. 🔴 Risk: MEDIUM (63.84/100) 💡 Action: Update to 24.07+ ASAP. #SecurityAlert #InfoSec #CyberSecurity