And even third-party providers sometimes use 7-Zip (or sub-functions) in their programs. However, there are some scenarios where older versions of 7-Zip are used. Igor Pavlov had reacted quickly after discovering the vulnerabilities and provided version 18.01 of 7-Zip. I recently posted the article 7-Zip vulnerable – update to version 18.01 about vulnerabilities in this tool and recommended an update to version 18.0 and higher. Unfortunately, security vulnerabilities in 7-Zip and the subordinate libraries with packing functions are found again and again. That's generous, so it isn't easy to criticize. 7-Zip and vulnerabilitiesħ-Zip is developed by Igor Pavlov and made available free of charge. This is something no user expects from 7-Zip, but it is not unrealistic. Or, to put it another way: The user tries to unpack a file, and a malware contained in the file becomes active and manipulates the files accessible under the user account. For this purpose, memory overflows must be provoked during unpacking, which can possibly be misused to execute the code. malware) could exploit vulnerabilities in 7-Zip & Co. Unfortunately, there is a problem with this function: The content of the archive files to be unpacked (i. The following figure shows the supported formats that can be associated to 7-Zip. The core function of a program such as 7-Zip is unpacking of archive files, whereby various formats are to be supported.

7 win zip