ECHO-a273-202b-9560
See a problem?- Import Source
- https://advisory.echohq.com/osv/ECHO-a273-202b-9560.json
- JSON Data
- https://api.osv.dev/v1/vulns/ECHO-a273-202b-9560
- Upstream
- Withdrawn
- 2026-07-19T16:41:19Z
- Published
- 2026-07-14T09:59:43Z
- Modified
- 2026-09-15T03:34:26Z
- Summary
- Windows-only. The flaw is that 7-Zip for Windows fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because a RAR5 STM record named ':Zone.Identifier:$DATA' / '::$DATA' is canonicalized by NTFS transparent Alternate Data Streams to overwrite the propagated Internet-zone marker / default data stream, defeating SmartScreen/MotW. MotW, Zone.Identifier ADS and NTFS :$DATA canonicalization do not exist on Linux (ntfs-3g does not do transparent ADS canonicalization), so the Echo Linux build is not affected. Debian marks trixie <ignored> for the same reason.
- Details
- References