CVE-2016-4300

Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute…

published September 21, 2016

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04919 · 92.0th percentile
Published
2016-09-21T14:00Z
EPSS history
Timeline
  • 21 SEP 14:00Z
    Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute…
    cvelistv5