7-Zip Directory Traversal Vulnerability Leading to Remote Code Execution

A directory traversal vulnerability allowing remote code execution has been identified in 7-Zip. This issue arises from the application's handling of symbolic links within ZIP files. Crafted ZIP file data can manipulate the extraction process to access unintended directories. As a result, an attacker could execute arbitrary code, potentially under the context of a service account. Exploitation of this vulnerability requires user interaction and may vary based on the specific implementation.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Remediation

Users can upgrade to 7-Zip version 25.00 to address this vulnerability.