7-Zip ARJ File Buffer Overflow Vulnerability(31030)

[jmurphy]

Has anyone come across this vulnerability?  We have several PC's with 7-zip installed for extracted .tar files in windows.  Even after we delete 7-zip, we still see these vulnerabilities being flagged by the pan.  Has anyone seen this behavior before?  Possibly a rootkit or other malware on the pc's?

Thanks

[hshah]

Hi Jmurphy,

By any chance is this a Global Protect or HIP issue? If yes, there might have been stale registery key, because of that Firewall is detecting 7zip on end Host.

If not, where do you see vulnerability flag ? Please provide more detail on vulnerability detection by firewall.

Regards,

Hardik Shah