CVE-2025-0411
Description
7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, 7-Zip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-25456.
How to fix
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date: Feb 27, 2025- 7-zip 7-zip24.09 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 7-zip 7-zip | v < 24.09 | 24.09 |
| netapp active_iq_unified_manager | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.