7-Zip: From Uninitialized Memory to Remote Code Execution
In Summary : Very abstractly, the bug can be described as follows: The initialization of some member data structures of the RAR decode...
https://updatesinfosec.blogspot.com/2018/05/7-zip-from-uninitialized-memory-to.html
In Summary :
Very abstractly, the bug can be described as follows: The initialization of some member data structures of the RAR decoder classes relies on the RAR handler to configure the decoder correctly before decoding something. Unfortunately, the RAR handler fails to sanitize its input data and passes the incorrect configuration into the decoder, causing usage of uninitialized memory[...]
kindly refer the following link as follow up :
https://ift.tt/2I5khlW
