Vulnerability Walkthrough: 7zip CVE-2016-2334 HFS+ Code Execution Vulnerability
Cisco Talos detailed CVE-2016-2334, a heap overflow in 7-Zip's CHandler::ExtractZlibFile function where a user-controlled size value read from an HFS+ file is copied into a fixed 0x10000 + 0x10 buffer without sanity checks. The researchers built a crafted...