According to Secunia PSI scanner, the version of 7-zip (V4.4.2) you are using with the current Nlite is insecure. Here is the link describing the vulnerability:

http://secunia.com/advisories/29434/

Hmmm, not really documented :


Reading the referred article:
http://www.ee.oulu.fi/research/ouspg/proto...ng/c10/archive/

It is clear that it is aimed to find vulnerabilitios in parsers of Unix Anti-virus apps when parsing files compressed in common archive formats.

There is no evidence of a specific 7-zip vulnerability, as far as I can see, if not a reference to a prior, known one:
http://xforce.iss.net/xforce/xfdb/22396
that was however limited to the .arj format.

The other cited article:
https://www.cert.fi/haavoittuvuudet/joint-a...ve-formats.html
does specify a 7-zip vulnerability, if I get it right in the way it handles errors due to a mal-formed archive, so you need a mal-formed archive as well.

Thanks for the heads up , but I don't think I will lose my sleep tonight for this.

jaclaz

even if it has a vulnerability, it makes no difference, it's just working with the nlite stuff