Windows libarchive Remote Code Execution Vulnerability
43Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.3epss 72%
exploitation probability
72%top 1% of all CVEs
observed exploitation
nono source reports it
In short
A flaw in the Windows version of libarchive (a file extraction library) allows attackers to run malicious code on a computer by crafting a specially designed archive file. When a user extracts this file, the attacker's code executes automatically.
Technical detail
Buffer overflow vulnerability (CWE-122) in Windows libarchive's archive extraction routine allows remote code execution through maliciously crafted archive files. Exploitation requires user interaction to extract the malicious archive; successful exploitation results in arbitrary code execution with the privileges of the extracting user.
Summary generated and translated by AI from the official description.
Windows libarchive Remote Code Execution Vulnerability
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Windows 11 version 22H2Microsoft · Windows 11 version 22H3Microsoft · Windows 11 Version 23H2Microsoft · Windows Server 2022, 23H2 Edition (Server Core installation)References
https://github.com/advisories/GHSA-w6xv-37jv-7cjrhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20697https://www.zerodayinitiative.com/blog/2024/4/17/cve-2024-20697-windows-libarchive-remote-code-execution-vulnerabilityhttp://www.openwall.com/lists/oss-security/2024/06/04/2http://www.openwall.com/lists/oss-security/2024/06/05/1