CVE-2007-3375
8.1 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.119 Low
EPSS
Percentile
95.2%
Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper.
| CPE | Name | Operator | Version |
|---|---|---|---|
| lhaca:file_archiver | lhaca file archiver | le | 1.20 |
References
secunia.com/advisories/25826
vuln.sg/lhaca121-en.html
www.kb.cert.org/vuls/id/871497
www.securityfocus.com/bid/24604
www.symantec.com/enterprise/security_response/weblog/2007/06/beware_of_lzh.html
www.symantec.com/security_response/writeup.jsp?docid=2007-062506-5500-99&tabid=1
exchange.xforce.ibmcloud.com/vulnerabilities/35116
Social References
More
Related
8.1 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.119 Low
EPSS
Percentile
95.2%