CVE-2007-5048

Lhaplus vulnerability (CVE-2007-5048): heap-based buffer overflow in Lhaplus before 1.55 when handling ARJ archives, triggered by a long filename. ARJ filenames can overflow the buffer, allowing remote code execution with the user’s privileges if a crafted file is opened. Affected product: Lhaplu...

JVN#70734805 Lhaplus buffer overflow vulnerability

Lhaplus, software for compression and decompression supporting various compressed file formats, contains a buffer overflow vulnerability. If a user opens a specially crafted file, arbitrary code could be executed with the privilege of the user. Impact Arbitrary code could be executed with the...

CVE-2006-4033

Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LZH archive with a long header, as specified by the extendedHeaderSize...

CVE-2006-4033

CVE-2006-4033 describes a heap-based buffer overflow in Lhaplus.exe within Lhaplus 1.52 (and possibly earlier) that allows remote code execution when processing an LZH archive with a long header as determined by extendedHeaderSize. The vulnerability is triggered by crafted archives and could enab...

lhaplus buffer overflow

Buffer overflow on LZH archive header parsing...

[vuln.sg] Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability

vuln.sg Vulnerability Research Advisory Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability by Tan Chew Keong Release Date: 2006-07-31 Summary ------- A vulnerability has been found in Lhaplus. When exploited, the vulnerability allows execution of arbitrary code when the user...