guglswag.blogg.se - july 2022

7ZX APPLICATION UPDATE

I see that there are quite a few CHM (.chm) files in your system. Most of scare tactic drama exploitable bugs are usual local, so I guess the solution should be to make sure nobody gets in your computer like you should already be doing in the first place?

I mean, just accept this is stupid to worry about and even give instructions to delete anything, it is a bug yes, but put it out there as this serious security issue that might be exploited so stay calm, don’t panic and do as I say….

7ZX APPLICATION UPDATE

I mean I would accept the fact that it can affect some enterprise but then, why would a business use 7zip and not something else anyway?Īnd wasn’t the power of Open Source that it could get fixed within 3 seconds of discovered but here there are the questions “when will it happen since last update was Dec 2021?” Just another drama more like a hoax by people who want to make money out of bug bounty programs or put their names out there as someone who discovered some lame bug around. I mean, we have to even imagine that the intruder even knows you have 7zip and can exploit it…Īnd then what? again, do you think they will care about 7zip then? The Help file won't open anymore after the deletion, when you select Help > Contents in the 7-Zip File Manager or press the F1-key on the keyboard.Īnd as usual this will not affect anyone relevant, especially ghacks viewers.Įven if it wasn’t just ‘local’, it wouldn’t be a problem, it’s like… if someone has already an intruder in their computers, I don’t think the first thought of the intruder will be “can I exploit 7zip?”

7-Zip functionality is not reduced when you delete the help file. The file is moved to the recycle bin of the operating system by default.

You may get a prompt, File Access Denied.

Hit the delete button on the keyboard or right-click on the file and select the Delete context menu option, to remove it from the system.

You can open it directly to display its content.

Locate the file 7-Zip.chm this is the help file.

On Windows, these are usually C:\Program Files\7-Zip or C:\Program Files (x86)\7-Zip, depending on whether the 64-bit or the 32-bit version of the application has been installed.

Open the 7-Zip installation directory or folder on the system.

Since it is using the included Help file, one way of dealing with the issue is to delete the Help file. Users of the application may use the following workaround to mitigate the vulnerability on their devices. The last update of the application dates back to the release of 7-Zip in December 2021 It is unclear if and when 7-Zip will address the issue. The page provides technical information and a short demonstration video of the exploit. Vulnerability details have been published on GitHub.