7-Zip Directory Traversal Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in 7-Zip, specifically in the handling of symbolic links within ZIP files. This flaw allows remote attackers to execute arbitrary code on affected installations by crafting ZIP files that cause the 7-Zip process to traverse to unintended directories. Exploitation of this vulnerability requires user interaction, and the executed code runs in the context of a service account.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Remediation

This vulnerability has been fixed in 7-Zip version 25.00.