They detect a serious vulnerability in the open source file compression software, 7-Zip, which is present in the latest update of this software.
Compressed files are quite common and the two most used solutions are WinRAR, which is 'paid' and the free and open source version is 7-Zip, which is widely recognized. 7-Zip has a fairly simple source code, which allows it to be lightweight, run very efficiently, and being free has made it king. Well, the Center for Internet Security has discovered a very important security vulnerability, which would allow the execution of an 'arbitrary' code.
This security flaw, which allows third parties to install different software and even view, edit and erase data, in addition to allowing these attackers to create administrator-type user accounts, in all systems where 7 -Zip is installed. There are currently no reports that this vulnerability has been exploited. This security hole appears in version 18.05, which was released on April 30, so anyone who has updated this software could be at risk.
There is still no software update that guarantees our security, so the only remedy is to install a version older than 18.05 of 7-Zip or use WinRAR, that depends on each user. It is recommended, for now, to run the software as if we were a user without administrator privileges, which will reduce the possible data that could originate in our system.
Actually this year is not being especially good in terms of computer security, since among vulnerabilities in hardware, software and internet access points, we have an extremely long list of problems and that we have only been five months.
Source: PCGamer
