Slackware: Security Advisory (SSA:2004-125-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2004-0694

Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any case...

CVE-2004-0694

Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any case...

CVE-2004-0694

Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any case...

CVE-2004-0694: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any case...

CVE-2004-0694

CVE-2004-0694 records a buffer overflow in LHA 1.14 and earlier. Connected docs specify the overflow occurs in the extract_one function (related to shell/command line handling), potentially enabling remote code execution. Affected: LHA

CVE-2010-2434

Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion...

Buffer overflow

Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion...

CVE-2010-2434

Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion...

CVE-2010-2434

The CVE-2010-2434 issue affects Explzh (pon Software) with Arcext.dll 2.16.1 and earlier. A crafted LHA/LZH header triggers a buffer overflow while Expanding the archive, allowing remote code execution. Affected component: Explzh’s LHA handling via Arcext.dll; root cause: unsafe handling of craft...

CVE-2010-2434: Buffer Copy without Checking Size of Input

Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion...

JVN#34729123 Explzh buffer overflow vulnerability

Explzh, a file compression/decompression software supporting multiple compression file formats, contains a buffer overflow vulnerability when processing a LHA file header. Impact When processing a specially crafted LHA file, a remote attacker may be able to execute arbitrary code. Solution Update...

McAfee Multiple Products LHA Type-2 File Handling Buffer Overflow (CVE-2005-0644)

McAfee, formally Network Associates Incorporated, produces a number of popular anti-virus products for both Enterprise and Desktop consumer use. These products are capable of detecting malicious content not only within regular files but also within compressed archives such as LHA archives. There...

SLES9: Security update for lha

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: lha More details may also be found by searching for keyword 5019689 within the SuSE Enterprise Server 9 patch database linked in the references...

SLES9: Security update for lha

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: lha More details may also be found by searching for keyword 5019689 within the SuSE Enterprise Server 9 patch database at...

SuSE9 Security Update : lha (YOU Patch Number 9194)

The source code of lha was reviewed to find possible security vulnerabilities. As a result several possible buffer overflows were fixed that can be exploited by providing a special archive to lha. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell...

CVE-2008-7144

WinRAR prior to 3.71 is affected by multiple unspecified vulnerabilities triggered by crafted archive formats (ACE, ARJ, BZ2, CAB, GZ, LHA, RAR, TAR, ZIP). The exact impact, vectors, and fixes are not detailed in the provided documents.

CVE-2008-7144: Undefined Security Weakness

Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted 1 ACE, 2 ARJ, 3 BZ2, 4 CAB, 5 GZ, 6 LHA, 7 RAR, 8 TAR, or 9 ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats...

FreeBSD : lha -- numerous vulnerabilities when extracting archives (273cc1a3-0d6b-11d9-8a8a-000c41e2cdad)

Source code reviews of lha by Lukasz Wojtow, Thomas Biege, and others uncovered a number of vulnerabilities affecting lha : - Buffer overflows when handling archives and filenames. CVE-2004-0694 - Possible command execution via shell meta-characters when built with NOMKDIR. CVE-2004-0745 - Buffer...

FreeBSD : lha buffer overflows and path traversal issues (a2ffb627-9c53-11d8-9366-0020ed76ef5a)

Ulf Harnhammar discovered several vulnerabilities in LHa for UNIX's path name handling code. Specially constructed archive files may cause LHa to overwrite files or execute arbitrary code with the privileges of the user invoking LHa. This could be particularly harmful for automated systems that...