← Vulnerability feed

Vulnerability record · CVE-2007-4725 · published 5 September 2007

CVE-2007-4725: 7-zip uncontrolled resource consumption vulnerability

7 Zip · 7 Zip

Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow.

6.8 CVSS 2.0 Medium EPSS 5.6% · top 7.4% CWE-400 · Uncontrolled resource consumption
6.8CVSS 2.0 base score
5.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
16References
16 Jun 2026Last modified by NVD

Description

Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://akky.cjb.net/security/7-zip3.txt Broken Link
http://jvn.jp/jp/JVN%2362868899/index.html Third Party Advisory
http://osvdb.org/40482 Broken Link
http://secunia.com/advisories/26624 Third Party Advisory
http://sourceforge.net/project/shownotes.php?release_id=535160&group_id=14481 ProductThird Party Advisory
http://www.securityfocus.com/bid/25545 Third Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2007/3086 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/36459 Third Party AdvisoryVDB Entry
http://akky.cjb.net/security/7-zip3.txt Broken Link
http://jvn.jp/jp/JVN%2362868899/index.html Third Party Advisory
http://osvdb.org/40482 Broken Link
http://secunia.com/advisories/26624 Third Party Advisory
http://sourceforge.net/project/shownotes.php?release_id=535160&group_id=14481 ProductThird Party Advisory
http://www.securityfocus.com/bid/25545 Third Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2007/3086 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/36459 Third Party AdvisoryVDB Entry

Track CVE-2007-4725 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.0CVE-2025-04117-Zip archive extraction fails to propagate Mark-of-the-Web7-Zip does not propagate the Mark-of-the-Web (MOTW) to files extracted from a crafted archive that itself carries MOTW. Because MOTW is what triggers…KEVEPSS 67%analysed10.0CVE-2008-65367-zip vulnerabilityUnspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as demonstrated by the PROTOS GENOME test suite for Arc…EPSS 2.8%8.8CVE-2026-480957-zip integer overflow vulnerability7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allo…EPSS 0.63%8.8CVE-2018-101727-zip improper privilege management vulnerability7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemoryPrivileg…EPSS 0.37%8.8CVE-2016-2335Opensuse memory buffer overflow vulnerabilityThe CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of servi…EPSS 9.8%8.1CVE-2026-480927-zip out-of-bounds read vulnerability7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset int…EPSS 0.50%7.8CVE-2026-142667-zip heap-based buffer overflow vulnerability7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar…EPSS 0.74%7.8CVE-2025-110027-zip path traversal vulnerability7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code …EPSS 0.55%

Source: NIST National Vulnerability Database (record CVE-2007-4725), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.