Notification

Icon
Error

7-Zip Arbitrary Code Execution Vulnerability

Posted: Friday, May 4, 2018 2:19:34 PM(UTC)
Esben.D

Esben.D

Member Administration Original PosterPosts: 1,982
6
Like
An arbitrary code execution vulnerability has recently been discovered in 7-Zip. By exploiting this arbitrary code execution, depending on the privileges of the user, an attacker can install programs; view, change, or delete data; or create new accounts with full user rights.
This topic outlines how you can deploy the fixed 7-Zip version. Using a report to check which machines have a vulnerable version of 7-Zip and the Lansweeper deployment module you can detect and update your vulnerable machines.

To make use of this guide make sure the following are in order:
If the requirements are in order, you can mass check and update all your vulnerable assets by doing the following:

1) Follow the instructions found in the Report Center to add the report to your Lansweeper installation.

2) Go to Deployment\Security Options and set up your package share and share user.

3) Follow the instructions found in the Installer Center to add the deployment to your Lansweeper installation and patch your assets.


7-Zip vulnerability
Esben.D
#1Esben.D Member Administration Original PosterPosts: 1,982  
posted: 5/4/2018 2:20:32 PM(UTC)
If you have any questions regarding the report or deployment package, please contact us via email at support@lansweeper.com

Active Discussions

Lansweeper Creating a schduled task on remote computer
by  Amos   Go to last post Go to first unread
Last post: 2/21/2021 10:57:02 AM(UTC)
Lansweeper Uninstall Software action not working?
by  Brandon  
Go to last post Go to first unread
Last post: 2/15/2021 10:03:22 PM(UTC)
Action Connect to computer using Spashtop Business
by  TapeDeck   Go to last post Go to first unread
Last post: 1/29/2021 5:00:29 PM(UTC)
Action Check Asset Window Update Status Via Powershell
by  Andy.S  
Go to last post Go to first unread
Last post: 1/19/2021 3:30:09 PM(UTC)
Lansweeper Updating Active Directory User fields
by  Nuno   Go to last post Go to first unread
Last post: 1/7/2021 5:49:03 PM(UTC)
Action Ping Sweep a Subnet
by  Computer Doctor  
Go to last post Go to first unread
Last post: 12/23/2020 7:16:01 PM(UTC)
Lansweeper User actions
by  makitaEU   Go to last post Go to first unread
Last post: 12/9/2020 1:57:07 PM(UTC)
Action Remote Uninstaller
by  miek_g  
Go to last post Go to first unread
Last post: 10/28/2020 3:52:20 PM(UTC)