Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: https://forum.uvnc.com/viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: https://forum.uvnc.com/viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://x.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

PcHelpWare and 7-zip vulnerability

Post Reply
poutnik
40
40
Posts: 65
Joined: 2008-01-30 20:52

PcHelpWare and 7-zip vulnerability

Post by poutnik »

PCHW instalation contains 7z.exe.

There is a vulnerability report about 7-zip prior to 4.57 version.

Secunia PSI founded 3 location of old vulnerable 7z.exe in pchw folders.
When I inspected original name, It was, as I had expected, 7za.exe, i.e. standalone 7z version. Not sure, if 7za is vulnerable too, but I am expecting it is.

Funny is , when trying to replace by one from my 7zip 4,57 instalation,
there is surprisingly no 7za.exe ( always was there ).

Do you consider releasing new PCHW version ?
poutnik
40
40
Posts: 65
Joined: 2008-01-30 20:52

Re: PcHelpWare and 7-zip vulnerability

Post by poutnik »

Well, one can download 7za.exe from 7zip site dowload page<, rename it to 7z.exe and put it there.

Or, copy there 7z.exe from 7-zip folder, should be ok.

Or, replace in PCHW related batch files 7z.exe by pathname of you genuine 7z.exe in 7-zip folder.
Post Reply