I daresay that many of you reading this probably have some kind of compression software installed on your PC or laptop. It’s a pretty common kind of program and is mostly utilised as a means of decompressing files that have been downloaded from the internet (the purpose of the compression being to reduce the amount of size they take up). – If you do, however, use 7-ZIP (a very popular choice) then you might want to take hope as following a post on Github, it has been discovered that the software contains a huge security flaw for Windows-based operating systems!
Being categorised as a ‘zero day’ flaw (meaning it’s been there ever since the software was created), the issue with 7-ZIP is quite concerning. Although the nature of this security exploit is quite complicated, as you might expect, I will try and break it down into some easy points.
Although only an issue affecting Windows-based systems (due to the aforementioned Windows help application) this security risk isn’t just a concept or theory. As per the video below, you can see how the compression software can be utilised to give a remote user ‘admin’ level of access to a PC/laptop. – In other words, this is an issue that exists, right now, on Windows computers with 7-ZIP installed.
As above, the security flaw only really presents a problem if an unauthorised person has access to your system. Admittedly though, and especially so for the more generic user, it can sometimes be very difficult to know if someone is lurking around that shouldn’t. – While an update for 7-ZIP is undoubtedly on the way in the very near future to resolve the problem, there are 2 known workarounds at the time of writing to temporarily resolve the problem:
While this news might sound shocking on the surface, it should be noted that security flaws like this are discovered pretty much all the time. And this includes far more widely-used pieces of software. – More than anything though, this should just highlight the need to always be vigilant online!
You can, incidentally, check out the full blog post regarding the 7-ZIP security flaw via the link here (Google translate might be your friend here)!
What do you think? – Let us know in the comments!
LIVE THE HORROR: An immersive disaster story aboard a stunningly realised North Sea oil rig,…
The Philips VA LED display uses an advanced multi-domain vertical alignment technology that gives you…
【TFT Screen: The Interactive Interface】This 75% mechanical keyboard comes equipped with a TFT Screen, serving…
FANDOM FUSION Play as your favorite characters and wield their unique weapons and skills. Team…
The Definitive Version of Shin Megami Tensei V - Fully evolved with stunning visuals for…
【Unique Split Design】5200mAh hand warmers rechargeable together with double-sided heating function, split snap swivel design,…