Lhaca文件档未明堆栈缓冲区溢出漏洞

Lhaca是一款解压缩软件。 Lhaca处理恶意LZH档文件存在未明堆栈缓冲区溢出，远程攻击者可以利用漏洞可能以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 Lhaca Lhaca 1.40 Lhaca Lhaca 1.20 目前没有解决方案提供： http://park8.wakwak.com/app/Lhaca/...

CVE-2007-3375

Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper...

Stack overflow

Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper...

CVE-2007-3375

Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper...

CVE-2007-3375

A stack-based buffer overflow exists in Lhaca File Archiver before version 1.21 . This vulnerability allows user-assisted remote attackers to execute arbitrary code by processing a crafted LZH archive . This flaw has been observed in the wild, notably exploited by malware such as Trojan.Lhdropper...

CVE-2007-3375: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper...

F-Secure Antivirus buffer overflow

Buffer overflow on LZH archives parsing. Infinite loop on ARJ and FSG parsing...

CVE-2007-2974

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."...

Buffer overflow

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."...

CVE-2007-2974

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."...

CVE-2007-2974

The CVE-2007-2974 entry concerns Avira AntiVir Antivirus (pre-7.03.00.09). The vulnerability is a buffer overflow in the file parsing engine when handling LZH archives, caused by an integer cast around in the parsing path, enabling remote code execution. The connected NVD entry confirms impact to...

Avira AntiVir File Handling Vulnerabilities

The remote host is running Avira AntiVir, an antivirus software application. The version of AntiVir installed on the remote host is reportedly prone to a buffer overflow in its LZH file processing code as well as denial of service vulnerabilities when parsing UPX and TAR files. An attacker may be...

Avira Antivir integer overflow

Integer overflow during .LZH archive parsing leads to buffer overflow. Devision by zero on UPX decoding. Infinite loop on TAR parsing...

GLSA-200611-24 : LHa: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200611-24 LHa: Multiple vulnerabilities Tavis Ormandy of the Google Security Team discovered several vulnerabilities in the LZH decompression component used by LHa. The maketable function of unlzh.c contains an array index error a...

LHa: Multiple vulnerabilities

Background LHa is a console-based program for packing and unpacking LHarc archives. Description Tavis Ormandy of the Google Security Team discovered several vulnerabilities in the LZH decompression component used by LHa. The maketable function of unlzh.c contains an array index error and a buffer...

Debian DSA-1181-1 : gzip - several vulnerabilities

Tavis Ormandy from the Google Security Team discovered several vulnerabilities in gzip, the GNU compression utility. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4334 A NULL pointer dereference may lead to denial of service if gzip is used in an...

GLSA-200609-13 : gzip: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200609-13 gzip: Multiple vulnerabilities Tavis Ormandy of the Google Security Team has reported multiple vulnerabilities in gzip. A stack buffer modification vulnerability was discovered in the LZH decompression code, where a...

CVE-2006-4335

Array index error in the maketable function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GZIP archive that triggers an...

CVE-2006-4335

Array index error in the maketable function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GZIP archive that triggers an...

CVE-2006-4335

The CVE-2006-4335 issue affects gzip 1.3.5, specifically the LZH decompression code (unlzh.c make_table), where an array index/out-of-bounds handling on certain platforms can cause a crash or arbitrary code execution via a crafted GZIP archive. Public advisories describe a stack modification/boun...