CVE-2016-2334

HIGH

7-zip < 16.00 - Remote Code Execution via Crafted HFS+ Image

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-2334. PoCs published by icewall.

AI-analyzed exploit summary This repository contains a functional exploit for CVE-2016-2334, targeting a heap-based vulnerability in 7-Zip's HFS+ archive handling. It includes a Python script to generate malicious HFS+ files and a WinDbg JavaScript script to analyze heap allocations during exploitation.

Description

Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image.

Exploits (1)

nomisec WORKING POC 10 stars

by icewall · poc

https://github.com/icewall/CVE-2016-2334

View Code ZIP pw:eip

This repository contains a functional exploit for CVE-2016-2334, targeting a heap-based vulnerability in 7-Zip's HFS+ archive handling. It includes a Python script to generate malicious HFS+ files and a WinDbg JavaScript script to analyze heap allocations during exploitation.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: 7-Zip (versions prior to fix for CVE-2016-2334)

No auth needed

Prerequisites: WinDbg for heap analysis · 7-Zip vulnerable version installed

MITRE ATT&CK