Home

CVE-2015-1038

Description

p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.

Risk Information

Base Score
7.5
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
3.183

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2015-1038 are affected in 7zip (.exe package) 9.20.1Windows
Vulnerabilities CVE-2015-1038 are affected in 7zip (x64) (.exe package) 9.20.1Windows
Vulnerabilities CVE-2015-1038 are affected in 7 Zip (MSI) (x64) 9.20.1Windows
Vulnerabilities CVE-2015-1038 are affected in 7 Zip (MSI) 9.20.1Windows
p7zip security update(DSA-3289-1) p7zip_9.20.1~dfsg.1-4+deb7u1_i386.debLinux
p7zip security update(DSA-3599-1) p7zip_9.20.1~dfsg.1-4.1+deb8u2_i386.debLinux
p7zip security update(DSA-3599-1) p7zip_9.20.1~dfsg.1-4.1+deb8u2_amd64.debLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-3312737 Zip (exe) (23.01)
PATCH-3312747 Zip (exe) (x64) (23.01)
PATCH-3559907 Zip (MSI) (x64) (26.00)
PATCH-3559897 Zip (MSI) (26.00)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234