美女与野兽
请立即更新至26.02版本:7-Zip被曝高危漏洞,可远程执行任意代码_我的网站

A | Berlin, Oct 11 (UNI) Close to 7,000 demonstrators took to the streets in more than 15 cities in Germany's Mecklenburg-Vorpommern state on October 10, demanding that the government ensure affordable cost of living and end arms supplies to Ukraine, German news agency dpa reported on Tuesday.
In the cities of Schwerin and Neubrandenburg, several demonstrations also called for peace talks on Ukraine and the lifting of sanctions against Moscow, according to dpa.
Demonstrators in Magdeburg were holding posters with demands to "end lies" about gas supplies and prevent prices from soaring for the sake of peace, freedom and prosperity, the report said.
According to preliminary police data obtained by dpa, about 2,400 demonstrators participated in the rally in the Mecklenburg-Vorpommern capital of Schwerin.
In addition, rallies took place in the German states of Saxony-Anhalt, Thuringia and Saxony. Аbout 1,000 protesters reportedly rallied in the state of Saxony-Anhalt with the same demand.
UNI/SPUTNIK GNK。 IT之家 7 月 21 日消息,安全研究机构 Zero Day Initiative 上周(7 月 15 日)提交漏洞报告称,压缩软件 7-Zip 存在一项基于堆(Heap)的缓冲区溢出漏洞,黑客可利用其远程执行任意代码。
据介绍,该漏洞编号为 CVE-2026-14266,CVSS 3.0 评分为 7.0 分(IT之家注:高危,满分 10 分)。
据悉,7-Zip 在处理 XZ 格式压缩文件时的分块(Chunk)数据存在部分缺陷,可能导致缓冲区溢出。

B | 攻击者只需要诱导用户打开精心构造的 XZ 压缩文件,就能成功触发漏洞,远程执行任意代码。
此外,该漏洞已于 6 月 5 日提交给 7-Zip 开发者,并在 6 月 25 日发布的 7-Zip 26.02 中完成修复。随后 ZDI 根据协调披露流程,于 7 月 15 日发出报告。仍在使用 26.02 以下版本的 7-Zip 用户应立即更新,以规避潜在的安全风险。

C |
Current article:http://swqx.fanfutaopoulaxiong.pics/news/20260826_204438.html
Published on:18:05:41