CVE-2016-4300
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2016-4300
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
libarchive 整数溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
libarchive是一个多格式存档和压缩库。 libarchive 3.2.0及之前版本中的archive_read_support_format_7zip.c文件中的‘read_SubStreamsInfo’函数存在整数溢出漏洞。远程攻击者可借助特制的7zip文件利用该漏洞执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2016-4300
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-4300
Please Login to view more intelligence information
- https://bugzilla.redhat.com/show_bug.cgi?id=1348439x_refsource_CONFIRM
- https://github.com/libarchive/libarchive/issues/718x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2016-4300
Same Patch Batch · n/a · 2016-09-21 · 43 CVEs total
| CVE-2015-8960 | TLS protocol 安全漏洞 | |
| CVE-2016-6250 | libarchive 整数溢出漏洞 | |
| CVE-2016-0905 | EMC Avamar Data Stor和Avamar Virtual Edition 提权漏洞 | |
| CVE-2016-0904 | EMC Avamar Data Store和Avamar Virtual Edition 安全漏洞 | |
| CVE-2016-0917 | 多款EMC产品安全漏洞 | |
| CVE-2016-0925 | EMC RSA Adaptive Authentication Case Management 跨站脚本漏洞 | |
| CVE-2016-4382 | HPE Performance Center 安全漏洞 | |
| CVE-2016-4384 | HPE Performance Center和LoadRunner 拒绝服务漏洞 | |
| CVE-2016-6530 | Dentsply Sirona CDR DICOM 安全漏洞 | |
| CVE-2016-0921 | EMC Avamar Data Store和Avamar Virtual Edition 提权漏洞 | |
| CVE-2016-0903 | EMC Avamar Data Store和Avamar Virtual Edition 安全漏洞 | |
| CVE-2016-7166 | libarchive 安全漏洞 | |
| CVE-2016-7163 | OpenJPEG 整数溢出漏洞 | |
| CVE-2016-7154 | Xen 释放后重用漏洞 | |
| CVE-2016-7143 | Charybdis 安全漏洞 | |
| CVE-2016-7094 | Xen 缓冲区溢出漏洞 | |
| CVE-2016-7093 | Xen 安全漏洞 | |
| CVE-2016-7092 | Xen 安全漏洞 | |
| CVE-2016-6801 | Apache Jackrabbit Jackrabbit-Webdav 跨站请求伪造漏洞 | |
| CVE-2016-6354 | Adobe Flex 基于堆的缓冲区错误漏洞 |
Showing top 20 of 43 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8196
JeecgBoot mLogin Endpoint LoginController.java authorization - CVE-2026-8195
JeecgBoot SVG File CommonController.java cross site scriptin - CVE-2026-8194
osTicket Dispatcher class.dispatcher.php cross-site request - CVE-2026-8193
Akaunting Invoice PDF Rendering dompdf.php server-side reque - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-
V. Comments for CVE-2016-4300
No comments yet