7-Zip Portable - No longer detected (Bug)
-
I accidental saw, that 7-Zip Portable was detected in the past but currently it is no longer detected.
Here you can see that 7-Zip Portable was detected in the past: https://vulndetect.org/topic/613/solved-7-zip-alter-version-numbe
Here the information extracted from the 32-Bit EXE file:
File name and path: D:\PortableApps\PortableApps\7-ZipPortable\App\7-Zip\7z.exe Product Name: 7-Zip Internal Name: 7z Original Filename: 7z.exe File Description: 7-Zip Console Company: Igor Pavlov Legal Copyright: Copyright (c) 1999-2022 Igor Pavlov Legal Trademarks: Comments: File Version String: 22.00 File Version: 22.0.0.0 Product Version String: 22.00 Product Version: 22.0.0.0
Here the information extracted from the 64-Bit EXE file:
File name and path: D:\PortableApps\PortableApps\7-ZipPortable\App\7-Zip64\7z.exe Product Name: 7-Zip Internal Name: 7z Original Filename: 7z.exe File Description: 7-Zip Console Company: Igor Pavlov Legal Copyright: Copyright (c) 1999-2022 Igor Pavlov Legal Trademarks: Comments: File Version String: 22.00 File Version: 22.0.0.0 Product Version String: 22.00 Product Version: 22.0.0.0 -
The reason you saw this in the past, is that you used to use the Personal edition.
The Personal edition by default displays files that are considered libraries.
The issue with 7z.exe is that it is hugely popular, as a library. In fact, there is an average of 1.6 7z.exe files on each host that uses VulnDetect, which are "real" libraries, only a tiny fraction of these are portable, like yours.
22% of all hosts have a "real" 7-Zip installation. These "real" installations are displayed correctly and updated automatically.
Sadly, there is no simple way (for us) to make a distinction between a 7z.exe that is used as a library, and one that is a portable file, like yours.
-
@Tom What about the file path?
If there is \PortableApps\PortableApps\7-ZipPortable\App in the file path, it is the portable version from PortableApps.
