TLDR InfoSec · ATTACKS & VULNERABILITIES
7-ZIP FIXES BUG THAT BYPASSES WINDOWS MOTW SECURITY WARNINGS
Summary from the TLDR InfoSec newsletter
7-Zip has released a patch for a vulnerability that could allow maliciously crafted archives to bypass Windows MotW protection. Mark of the Web (MotW) is a flag that alerts users and the operating system that a file may have come from an untrusted source and prompts for permission before running. In this vulnerability, 7-Zip failed to propagate the MotW from the archive to the extracted files.