CVE-2024-20697
Windows libarchive Remote Code Execution Vulnerability
In short
A flaw in the Windows version of libarchive (a file extraction library) allows attackers to run malicious code on a computer by crafting a specially designed archive file. When a user extracts this file, the attacker's code executes automatically.
Technical detail
Buffer overflow vulnerability (CWE-122) in Windows libarchive's archive extraction routine allows remote code execution through maliciously crafted archive files. Exploitation requires user interaction to extract the malicious archive; successful exploitation results in arbitrary code execution with the privileges of the extracting user.
Summary generated and translated by AI from the official description.
Windows libarchive Remote Code Execution Vulnerability
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Windows 11 version 22H2Microsoft · Windows 11 version 22H3Microsoft · Windows 11 Version 23H2Microsoft · Windows Server 2022, 23H2 Edition (Server Core installation)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
https://github.com/advisories/GHSA-w6xv-37jv-7cjrhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20697https://www.zerodayinitiative.com/blog/2024/4/17/cve-2024-20697-windows-libarchive-remote-code-execution-vulnerabilityhttp://www.openwall.com/lists/oss-security/2024/06/04/2http://www.openwall.com/lists/oss-security/2024/06/05/1