topic 7-Zip ARJ File Buffer Overflow Vulnerability(31030) in General Topics

7-Zip ARJ File Buffer Overflow Vulnerability(31030)

jmurphy — Tue, 17 Dec 2013 14:30:23 GMT

Has anyone come across this vulnerability? We have several PC's with 7-zip installed for extracted .tar files in windows. Even after we delete 7-zip, we still see these vulnerabilities being flagged by the pan. Has anyone seen this behavior before? Possibly a rootkit or other malware on the pc's?

Thanks

Re: 7-Zip ARJ File Buffer Overflow Vulnerability(31030)

hshah — Thu, 26 Dec 2013 00:40:28 GMT

Hi Jmurphy,

By any chance is this a Global Protect or HIP issue? If yes, there might have been stale registery key, because of that Firewall is detecting 7zip on end Host.

If not, where do you see vulnerability flag ? Please provide more detail on vulnerability detection by firewall.

Regards,

Hardik Shah