Notification

Icon
Error

7-Zip Arbitrary Code Execution Vulnerability Deployment

Posted: Friday, May 4, 2018 2:14:51 PM(UTC)
Esben.D

Esben.D

Member Administration Original PosterPosts: 1,982
8
Like
This deployment package will update 7-Zip to version 18.05 which has a fix included for the 7-Zip Arbitrary Code Execution Vulnerability.

Update 14th of May: modified the deployment package slightly to give more clear success feedback

Instructions:
  • Click Download Package on this page to download the .xml version of the deployment package for import
  • Import the attached .XML file into your Lansweeper installation by going to the Deployment menu and clicking Import.
  • Download the x64 and x86 7-Zip 18.05 MSI installer.
  • Move the 7-Zip MSI installer to your Packageshare\Installers\7-Zip folder. The default package share is Program Files (x86)\Lansweeper\Packageshare on your Lansweeper server.
  • Go to Deployment tab in the web console, select the 7-Zip 18.05 - Installer
  • Click on 'Deploy Now'
  • You can deploy based on a selection of your choosing, however, we recommend using the report you imported earlier. You can also find the report in this forum topic.

7-Zip 18.05 - InstallerDownload Package
DescriptionInstall 7zip 32/64 bit depending on target architecture
Designed for version 18.05

PackageShare Path (32bit): "{Packageshare}\installers\7-Zip\7z1805.msi"
PackageShare Path (64bit): "{Packageshare}\installers\7-Zip\7z1805-x64.msi"

Cleans up orphaned registry records if 7-zip was previously installed via .exe
Final ActionNothing
Max. Duration15 min(s), 0 hour(s)
RescanYes
Steps
1. Check Architecture
TypeCondition
SuccessGo To Step 2
FailureGo To Step 3
Conditions
OS Architecture Is 32 Bit
2. Check if 32-bit installed
TypeCondition
SuccessGo To Step 5
FailureGo To Step 6
Conditions
Registry HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{23170F69-40C1-2701-1604-000001000000}\ UninstallString Exists
3. Check if 64 bit installed
TypeCondition
SuccessGo To Step 4
FailureGo To Step 7
Conditions
Registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{23170F69-40C1-2702-1604-000001000000}\ UninstallString Exists
4. Check 64-bit version
TypeCondition
SuccessStop (Success)
FailureGo To Step 7
Conditions
Registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{23170F69-40C1-2702-1604-000001000000}\ DisplayVersion Has Value 18.05.00.0
5. Check 32-bit version
TypeCondition
SuccessStop (Success)
FailureGo To Step 6
Conditions
Registry HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{23170F69-40C1-2701-1604-000001000000}\ DisplayVersion Has Value 18.05.00.0
6. Does 32-bit installer exist
TypeCondition
SuccessGo To Step 8
FailureStop (Failure)
Conditions
File {PackageShare}\Installers\7-Zip\ 7z1805.msi Exists
7. Does 64-bit installer exist
TypeCondition
SuccessGo To Step 9
FailureStop (Failure)
Conditions
File {PackageShare}\Installers\7-Zip\ 7z1805-x64.msi Exists
8. Install 32 bit
TypeInstaller
Return Codes 0,1641,3010
SuccessGo To Step 10
FailureStop (Failure)
Command msiexec.exe /i "{PackageShare}\installers\7-Zip\7z1805.msi" /norestart /qn
9. Install 64 bit
TypeInstaller
Return Codes 0,1641,3010
SuccessGo To Step 10
FailureStop (Failure)
Command msiexec.exe /i "{PackageShare}\installers\7-Zip\7z1805-x64.msi" /norestart /qn
10. Check for old 32-bit registry records
TypeCondition
SuccessGo To Step 12
FailureGo To Step 11
Conditions
Registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\7-Zip DisplayName Exists
11. Check for old 64-bit registry records
TypeCondition
SuccessGo To Step 13
FailureGo To Step 14
Conditions
Registry HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\7-zip DisplayName Exists
12. Delete orphaned 32-bit registry key
TypeCommand
Return Codes 0,1641,3010
SuccessGo To Step 11
FailureStop (Failure)
Command reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\7-Zip /f
13. Delete orphaned 64-bit registry key
TypeCommand
Return Codes 0,1641,3010
SuccessStop (Success)
FailureStop (Failure)
Command reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\7-zip /f
14. Deployment successful
TypeCommand
Return Codes 0,1641,3010
SuccessStop (Success)
FailureStop (Success)
Command rem
Esben.D
#1Esben.D Member Administration Original PosterPosts: 1,982  
posted: 5/4/2018 2:21:45 PM(UTC)
If you have any questions regarding the deployment package, please contact us via email at support@lansweeper.com

Active Discussions

Lansweeper Acknowlege from Alerts
by  Hilbers   Go to last post Go to first unread
Last post: Today at 7:55:38 AM(UTC)
Lansweeper LsAgent for Windows command line options?
by  Brandon  
Go to last post Go to first unread
Last post: Yesterday at 4:49:17 PM(UTC)
Lansweeper EmailLog.txt file become big in size
by  Ary Ahmed   Go to last post Go to first unread
Last post: 4/18/2021 10:56:58 AM(UTC)
Lansweeper LsAgent.ini
by  Orion Poplawski  
Go to last post Go to first unread
Last post: 4/17/2021 4:49:12 PM(UTC)
Lansweeper LSagent force a scan
by  Orion Poplawski   Go to last post Go to first unread
Last post: 4/17/2021 4:46:49 PM(UTC)
Lansweeper MS Edge Chromium LanSweeper Extension development
by  steveb  
Go to last post Go to first unread
Last post: 4/16/2021 10:59:56 PM(UTC)
Lansweeper Office 365 v2 Scanning Error
by  DJX   Go to last post Go to first unread
Last post: 4/16/2021 7:37:57 PM(UTC)
Lansweeper Database size growing too large
by  JTempleton  
Go to last post Go to first unread
Last post: 4/16/2021 5:19:22 PM(UTC)