75 matches found
CVE-2007-6175
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048...
CVE-2007-6175: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048...
CVE-2007-6175
CVE-2007-6175 affects Lhaplus 1.55 and earlier. A buffer overflow in LZH archive handling could allow remote attackers to execute arbitrary code when decompressing a crafted LZH file. Connected documents corroborate a vulnerable Lhaplus prior to 1.55 and note this is a separate issue from CVE-200...
JVN#82610488 Lhaplus buffer overflow vulnerability
Lhaplus, file compression/decompression software supporting multiple compression file formats, contains a buffer overflow vulnerability. If a user decompresses a specially crafted file, an attacker could execute arbitrary code with the privilege of the user. This vulnerability is different from...
CVE-2007-5048
Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive...
Heap overflow
Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive...
CVE-2007-5048
Lhaplus vulnerability (CVE-2007-5048): heap-based buffer overflow in Lhaplus before 1.55 when handling ARJ archives, triggered by a long filename. ARJ filenames can overflow the buffer, allowing remote code execution with the user’s privileges if a crafted file is opened. Affected product: Lhaplu...
CVE-2007-5048
Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive...
CVE-2007-5048: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive...
JVN#70734805 Lhaplus buffer overflow vulnerability
Lhaplus, software for compression and decompression supporting various compressed file formats, contains a buffer overflow vulnerability. If a user opens a specially crafted file, arbitrary code could be executed with the privilege of the user. Impact Arbitrary code could be executed with the...
CVE-2006-4033
Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LZH archive with a long header, as specified by the extendedHeaderSize...
CVE-2006-4033
CVE-2006-4033 describes a heap-based buffer overflow in Lhaplus.exe within Lhaplus 1.52 (and possibly earlier) that allows remote code execution when processing an LZH archive with a long header as determined by extendedHeaderSize. The vulnerability is triggered by crafted archives and could enab...
CVE-2006-4033: Undefined Security Weakness
Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LZH archive with a long header, as specified by the extendedHeaderSize...
[vuln.sg] Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability
vuln.sg Vulnerability Research Advisory Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability by Tan Chew Keong Release Date: 2006-07-31 Summary ------- A vulnerability has been found in Lhaplus. When exploited, the vulnerability allows execution of arbitrary code when the user...