Another 7-Zip Hole for Your Soul

Our dear 7-Zip version 26.00 has decided that basic compression isn't exciting enough, so it added a heap buffer overflow in its NTFS archive handler for some spice. Anyone daring enough to open an untrusted file can now gift attackers arbitrary code execution on their systems, which is just what we all needed this morning. This lovely feature affects anyone still clinging to the hope that a simple zip tool is safe. To avoid this latest headache, we’re forced to update the software, assuming we haven’t already lost faith in the concept of patching.