CVE-2007-3300

CVE-2007-3300 affects multiple F-Secure anti-virus products for Windows and Linux prior to 20070619. The vulnerability allows remote attackers to bypass scanning by exploiting a crafted header in (1) LHA or (2) RAR archives. Root cause is a flaw in header handling that enables bypass of the antiv...

CVE-2007-3300

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a 1 LHA or 2 RAR archive...

CVE-2007-3300: Undefined Security Weakness

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a 1 LHA or 2 RAR archive...

Mandrake Linux Security Advisory : lha (MDKSA-2007:117)

lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Fedora Core 5 : lha-1.14i-20 (2007-557)

Thu May 31 2007 Tomas Smetana - 1.14i-20 - fix 220596 CVE-2006-4335/7/8 multiple vulnerabilities in lha Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

Design/Logic Flaw

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted LHA archive, related to an integer wrap, a similar issu...

CVE-2007-2966

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted LHA archive, related to an integer wrap, a similar issu...

CVE-2007-2966

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted LHA archive, related to an integer wrap, a similar issu...

CVE-2007-2966

CVE-2007-2966 describes a buffer overflow in the LHA decompression component of F-Secure antivirus products for Windows and Linux (pre-20070529). The flaw is triggered by a crafted LHA archive and is tied to an integer wrap issue, enabling remote attackers to potentially execute arbitrary code or...

[SECURITY] Fedora Core 5 Update: lha-1.14i-20

LHA is an archiving and compression utility for LHarc format archives. LHA is mostly used in the DOS world, but can be used under Linux to extract DOS files from LHA archives. Install the lha package if you need to extract DOS files from LHA archives...

CVE-2007-2966: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted LHA archive, related to an integer wrap, a similar issu...

CVE-2007-2030

lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked...

CVE-2007-2030

lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked...

Information disclosure

lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked...

CVE-2007-2030

The CVE-2007-2030 issue affects the lha LHA tool, specifically the lharc.c code, which does not securely create temporary files. This could allow a local attacker to read or write files by creating a file before LHA is invoked. Affected component: lharc.c in lha (no vendor/versions specified in t...

CVE-2007-2030

lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked...

CVE-2007-2030: Undefined Security Weakness

lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked...

Security fix for the ALT Linux 6 package lha version 2:1.14i-alt2

April 15, 2007 Michael Shigorin 2:1.14i-alt2 - ac20050924p1: security fixes for CVE-2006-4335, CVE-2006-4337, CVE-2006-4338 DoS, system access - removed patch1, patch2, patch4, patch5 didn't apply...

avast! Server Edition LHA Archive Extended-header Field Processing Overflow

The remote host is running avast! Server Edition. The installed version of avast! Server Edition is reportedly prone to a heap overflow when processing LHA archives with long filename and directory-name extended-header fields. An attacker may be able to exploit this issue to execute arbitrary cod...

GLSA-200611-24 : LHa: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200611-24 LHa: Multiple vulnerabilities Tavis Ormandy of the Google Security Team discovered several vulnerabilities in the LZH decompression component used by LHa. The maketable function of unlzh.c contains an array index error a...