7-Zip: From Uninitialized Memory to Remote Code Execution

（情報元のブックマーク数）

7-Zipにリモートコードが実行可能な脆弱性が発見らしい

After my previous post on the 7-Zip bugs CVE-2017-17969 and CVE-2018-5996, I continued to spend time on analyzing antivirus software. As it happens, I found a new bug that (as the last two bugs) turned out to affect 7-Zip as well. Since the antivirus vendor has not yet published a patch, I will add the name of the affected product in an update to this post as soon as this happens.
7-Zip: From Uninitialized Memory to Remote Code Execution | landave's blog