3 matches found
SUSE CVE-2004-0771
Buffer overflow in the extractone function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w working directory command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise...
LHA extrace_one Vuffer Overflow Vulnerability
Overview LHA lhext.c contains a buffer overflow vulnerability with the extractone funcation, which stems from improper handling of a 'w' option argument. Impact An remote attacker could execute arbitrary code. Solution Please refer to the 'Vendor Information' section for official remediation and...
CVE-2004-0771
CVE-2004-0771 describes a buffer overflow in the extract_one function of lhext.c in LHA triggered by a long w (working directory) command-line option, allowing remote code execution as stated in the description. The issue is linked to related LHA vulnerabilities (e.g., CVE-2004-0694, CVE-2004-076...