Authors:Igor Pavlov Risk：Medium CVE：CVE-2018-10172 0day:Privilege Escalation 0day-id:0DAY-10172 Date：2018-04-20
A vulnerability in 7-Zip running on Microsoft Windows 10 could allow a local attacker to bypass access restrictions on a targeted system.
The vulnerability is due to improper security restrictions imposed by the affected software when the large memory pages option is used. When using this option, the SeLockMemoryPrivilege privilege is added to the current user account using the LsaAddAccountRights function, which could allow other applications on the system access to that privilege. An attacker could exploit this vulnerability by executing an application on the system, which would run with SeLockMemoryPrivilege privileges, allowing the attacker to bypass access restrictions on a targeted system.
7-Zip has not confirmed the vulnerability and software updates are not available.
To exploit this vulnerability, the attacker must have user-level access to the targeted system. This access requirement could reduce the likelihood of a successful exploit.
Administrators are advised to contact the vendor regarding future updates and releases.
Administrators are advised to allow only trusted users to access local systems.
Administrators are advised to allow only privileged users to access administration or management systems.
Administrators are advised to monitor critical systems.
At the time this alert was first published, 7-Zip had not released a security announcement.
At the time this alert was first published, 7-Zip had not released software updates.
Version Description Section Date 1 Initial public release. — 2018-April-19
The security vulnerability applies to the following combinations of products.
Primary Products GNU Lesser General Public License (LGPL) 7-Zip 4.42 (Base) | 4.57 (Base) | 4.62 (Base) | 4.63 (Base) | 4.64 (Base) | 4.65 (Base) | 9.20 (.0) | 15.05 beta (.0) | 15.10 (Base) | 15.12 (.0) | 15.14 (.0) | 16.02 (Base) | 16.03 (Base) | 16.04 (Base) | 18.01 (Base)