JVN#82610488 Lhaplus buffer overflow vulnerability

Lhaplus, file compression/decompression software supporting multiple compression file formats, contains a buffer overflow vulnerability. If a user decompresses a specially crafted file, an attacker could execute arbitrary code with the privilege of the user.

This vulnerability is different from JVN#70734805.

Impact

An attacker could execute arbitrary code with the privilege of the user who decompressed the file.

Solution

Update the Software
Apply the latest updates provided by the developer.

For more information, refer to the developer’s website.

Products Affected

• Lhaplus Version 1.55 and earlier