Skip to main content

Public advisory of scammers impersonating CSA and the SPF

Members of public are advised to stay vigilant and not follow any instructions given by these scammers. Read the public advisory

Cyber Security Agency of Singapore
  1. Home
  2. Alerts & Advisories
  3. Alerts
  4. Vulnerabilities in 7-Zip
Alerts

Vulnerabilities in 7-Zip

21 January 2025

7-Zip has released security updates addressing vulnerabilities (CVE-2025-0411 & CVE-2024-11477) in their software.

Successful exploitation of these vulnerabilities could allow a remote attacker to execute malicious code through specially crafted archive files that were opened.

These vulnerabilities have been fixed in 7-Zip version 24.09.

Users and administrators are advised to update to the latest version.

More information is available here:

https://www.zerodayinitiative.com/advisories/ZDI-25-045/

https://www.zerodayinitiative.com/advisories/ZDI-24-1532/

https://nvd.nist.gov/vuln/detail/CVE-2024-11477