Exploitation Summary
EIP tracks 5 public exploits for CVE-2022-29072. PoCs published by kagancapar, sentinelblue, tiktb8.
AI-analyzed exploit summary This repository contains a detailed writeup in Turkish about CVE-2022-29072, a privilege escalation vulnerability in 7-Zip. The author describes the discovery process, exploitation technique involving a heap overflow and misuse of the HTML Help API, and a method to achieve SYSTEM privileges via psexec.
Description
7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area. This is caused by misconfiguration of 7z.dll and a heap overflow. The command runs in a child process under the 7zFM.exe process. NOTE: multiple third parties have reported that no privilege escalation can occur
Exploits (5)
This repository contains a detailed writeup in Turkish about CVE-2022-29072, a privilege escalation vulnerability in 7-Zip. The author describes the discovery process, exploitation technique involving a heap overflow and misuse of the HTML Help API, and a method to achieve SYSTEM privileges via psexec.
This repository provides a writeup and mitigation script for CVE-2022-29072, a potential privilege escalation vulnerability in 7-Zip through 21.07 on Windows. It includes a PowerShell script to remove the 7-zip.chm help file as a mitigation measure and Sentinel alerting rules for detection.
This repository contains a PowerShell script designed to detect and optionally mitigate vulnerable CHM files associated with CVE-2022-29072 in 7-Zip. The script checks file hashes against a list of known vulnerable hashes and can delete them if configured.
This repository provides a PowerShell script to mitigate CVE-2022-29072 by removing the vulnerable 7-zip.chm file. The vulnerability allows privilege escalation and command execution via interaction with hh.exe on Windows.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H