66 matches found
CVE-2015-0907
Buffer overflow in Lhaplus before 1.70 allows remote attackers to execute arbitrary code via a crafted archive...
CVE-2015-0906
Directory traversal vulnerability in Lhaplus before 1.70 allows remote attackers to write to arbitrary files via a crafted archive...
Buffer overflow
Buffer overflow in Lhaplus before 1.70 allows remote attackers to execute arbitrary code via a crafted archive...
Directory traversal
Directory traversal vulnerability in Lhaplus before 1.70 allows remote attackers to write to arbitrary files via a crafted archive...
CVE-2015-0907
CVE-2015-0907 affects Lhaplus, a file compression/decompression tool. The vulnerability is a buffer overflow in Lhaplus before 1.70 that allows remote code execution when processing a specially crafted archive. Affected versions include 1.59 and earlier. The issue is documented across multiple so...
CVE-2015-0906
Directory traversal vulnerability in Lhaplus before 1.70 allows remote attackers to write to arbitrary files via a crafted archive...
CVE-2015-0906
CVE-2015-0906 affects Lhaplus, a file compression/decompression tool. A directory traversal vulnerability exists due to an issue in processing file names, allowing a crafted archive to write arbitrary files on the system. Impact is practical file overwrite or creation during decompression for ver...
CVE-2015-0907
Buffer overflow in Lhaplus before 1.70 allows remote attackers to execute arbitrary code via a crafted archive...
Lhaplus vulnerable to remote code execution
Overview Lhaplus is a file compression/decompression software. Lhaplus contains a remote code execution vulnerability. Masato Kinugawa reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Decompressing a speciall...
Lhaplus vulnerable to directory traversal
Overview Lhaplus is a file compression/decompression software. Lhaplus contains an issue in processing file names, which may result in a directory traversal vulnerability. akirayou of Nico-TECH reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...
JVN#12329472: Lhaplus vulnerable to remote code execution
Lhaplus is a file compression/decompression software. Lhaplus contains a remote code execution vulnerability. Impact Decompressing a specially crafted file name may result in an arbitrary code execution. Solution Update the Software Update to the latest version according to the information provid...
JVN#02527990: Lhaplus vulnerable to directory traversal
Lhaplus is a file compression/decompression software. Lhaplus contains an issue in processing file names, which may result in a directory traversal vulnerability. Impact Decompressing a file with a specially crafted file name may result in a creation of an arbitrary file or an overwrite of an...
Lhaplus Untrusted search path Vulnerability
This host is installed with Lhaplus and is prone to untrusted search path vulnerability. OpenVAS Vulnerability Test $Id: gblhaplusuntrustedsearchpathvuln.nasl 5374 2017-02-20 16:36:11Z cfi $ Lhaplus Untrusted search path Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone...
Lhaplus Untrusted search path Vulnerability
Lhaplus is prone to untrusted search path vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Lhaplus may insecurely load executable files
Overview Lhaplus may use unsafe methods for determining how to load executables .exe. Lhaplus is a file compression/extraction software supporting multiple file formats. Lhaplus loads certain executables .exe when extracting files. Lhaplus contains an issue with the file search path, which may...
CVE-2010-3158
Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory...
Design/Logic Flaw
Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory...
CVE-2010-3158
Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory...
CVE-2010-3158
CVE-2010-3158 affects Lhaplus prior to 1.58 and is an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse executable in the current working directory. Affected component/file: Lhaplus (untrusted search path handling). Impact described in sources: attacker...