7-zip18.01 Windows CVE-2018-10172 – Privilege Escalation

Authors:Igor Pavlov            Risk:Medium

CVE:CVE-2018-10172            0day:Privilege Escalation

0day-id:0DAY-10172             Date:2018-04-20

Summary

A vulnerability in 7-Zip running on Microsoft Windows 10 could allow a local attacker to bypass access restrictions on a targeted system.

The vulnerability is due to improper security restrictions imposed by the affected software when the large memory pages option is used. When using this option, the SeLockMemoryPrivilege privilege is added to the current user account using the LsaAddAccountRights function, which could allow other applications on the system access to that privilege. An attacker could exploit this vulnerability by executing an application on the system, which would run with SeLockMemoryPrivilege privileges, allowing the attacker to bypass access restrictions on a targeted system.

7-Zip has not confirmed the vulnerability and software updates are not available.

Analysis

To exploit this vulnerability, the attacker must have user-level access to the targeted system. This access requirement could reduce the likelihood of a successful exploit.

Safeguards

Administrators are advised to contact the vendor regarding future updates and releases.

Administrators are advised to allow only trusted users to access local systems.

Administrators are advised to allow only privileged users to access administration or management systems.

Administrators are advised to monitor critical systems.

Vendor Announcements

At the time this alert was first published, 7-Zip had not released a security announcement.

Fixed Software

At the time this alert was first published, 7-Zip had not released software updates.

Revision History

  • Version Description Section Date
    1 Initial public release. 2018-April-19

    Affected Products

    • The security vulnerability applies to the following combinations of products. 

      Primary Products
      GNU Lesser General Public License (LGPL) 7-Zip 4.42 (Base) | 4.57 (Base) | 4.62 (Base) | 4.63 (Base) | 4.64 (Base) | 4.65 (Base) | 9.20 (.0) | 15.05 beta (.0) | 15.10 (Base) | 15.12 (.0) | 15.14 (.0) | 16.02 (Base) | 16.03 (Base) | 16.04 (Base) | 18.01 (Base)

 

Leave a Reply