Notification

Icon
Error

7-Zip Arbitrary Code Execution Vulnerability Check

Posted: Friday, May 4, 2018 2:13:36 PM(UTC)
Esben.D

Esben.D

Member Administration Original PosterPosts: 1,685
6
Like
Update 7th of May, posted a different report that is immune to conversion errors: due to the high variance in the formatting of 7-zip version numbers our previous report could cause conversion errors in certain installations. The new report lists all computers that don't have the current latest version of 7-zip installed (18.05), but will need to be adjusted when newer versions are released.

This report lists all computers which have an installation of a 7-Zip version lower than 18.05 and are vulnerable to the 7-Zip Arbitrary Code Execution Vulnerability. If vulnerable assets are found, you can patch them by using the steps in the 7-Zip Arbitrary Code Execution Vulnerability Announcement.

To run this report, do the following:
  • Open the report builder in the Lansweeper web console under Reports/Create New Report.
  • Paste the SQL query (report) found below at the bottom of the page, replacing the default SQL query.
  • Left-click somewhere in the upper section of the page so the query applies.
  • Give the report a title.
  • Hit the Save & Run button to save the report. Export options are listed on the left.
Code:
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tblAssets.Username,
tblAssets.Userdomain,
Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
tblAssets.Lastseen,
tblAssets.Lasttried,
tblSoftwareUni.softwareName As Software,
tblSoftware.softwareVersion As Version,
tblSoftwareUni.SoftwarePublisher As Publisher,
tblSoftware.Lastchanged
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName Like '%7-Zip%' And
tblSoftware.softwareVersion Not Like '%18.05%' And tblState.Statename =
'Active'
Order By tblAssets.Domain,
tblAssets.AssetName,
Software
Esben.D
#1Esben.D Member Administration Original PosterPosts: 1,685  
posted: 5/4/2018 2:22:00 PM(UTC)
If you have any questions regarding the report, please contact us via email at support@lansweeper.com

Active Discussions

Lansweeper Clients missing specific Office feature
by  CyberCitizen   Go to last post Go to first unread
Last post: Today at 1:28:26 AM(UTC)
Report Center Windows 10 compliance (color-coded)
by  CyberCitizen  
Go to last post Go to first unread
Last post: Today at 1:15:07 AM(UTC)
Lansweeper User association report query
by  endyk   Go to last post Go to first unread
Last post: Yesterday at 9:47:25 PM(UTC)
Lansweeper Report for SSAS and SSIS
by  The Boss  
Go to last post Go to first unread
Last post: 6/25/2019 6:53:21 PM(UTC)
Lansweeper Firefox 67.0.3 zero-day vulnerability
by  Esben.D   Go to last post Go to first unread
Last post: 6/25/2019 3:34:44 PM(UTC)
Lansweeper PO Box Query
by  kmoc  
Go to last post Go to first unread
Last post: 6/25/2019 11:16:28 AM(UTC)
Lansweeper Computer Age Chart Report
by  CyberCitizen   Go to last post Go to first unread
Last post: 6/25/2019 8:40:47 AM(UTC)
Lansweeper Dell SupportAssist CVE-2019-12280
by  Esben.D  
Go to last post Go to first unread
Last post: 6/24/2019 9:15:20 AM(UTC)