GFI Archiver Deserialization of Untrusted Data Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in GFI Archiver due to deserialization of untrusted data in the MArc.Store.Remoting.exe process. This issue arises from inadequate validation of user-supplied data, allowing remote attackers to execute arbitrary code on the affected system with SYSTEM privileges. Although authentication is required for exploitation, this can be bypassed.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, with the executed code running in the context of the SYSTEM user.

Remediation

Users can upgrade to GFI Archiver version 15.11 to address this vulnerability.