What’s Vulnerable › Vulnerabilities

CVE-2017-2107

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-04-28 · updated 2026-06-17
• Weakness: CWE-426

Description

Untrusted search path vulnerability in Self-extracting archive files created by 7-ZIP32.DLL 9.22.00.01 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

• Akky Self-extracting archive files created by 7-ZIP32.DLL: through 9.22.00.01

References

• http://akky.xrea.jp/security/7-zip4.txt
• http://jvn.jp/en/jp/JVN86200862/index.html
• http://www.securityfocus.com/bid/96431
• http://akky.xrea.jp/security/7-zip4.txt
• http://jvn.jp/en/jp/JVN86200862/index.html
• http://www.securityfocus.com/bid/96431

Get alerted when CVE-2017-2107 or the next vulnerability affects your stack