CVE-2010-2434

The CVE-2010-2434 issue affects Explzh (pon Software) with Arcext.dll 2.16.1 and earlier. A crafted LHA/LZH header triggers a buffer overflow while Expanding the archive, allowing remote code execution. Affected component: Explzh’s LHA handling via Arcext.dll; root cause: unsafe handling of craft...

CVE-2018-0646

CVE-2018-0646 affects Explzh up to v7.58 with a directory traversal vulnerability (CWE-22). Exploitation allows reading arbitrary files via absolute path traversal during extraction, as described in JVN/JVNDB sources. Affected product: Explzh v.7.58 and earlier. Root cause: directory traversal du...

CVE-2010-3159

CVE-2010-3159 affects Explzh up to version 5.67, where an unsafe file search path may cause loading of unintended executables (.exe) when extracting files. This could allow an attacker to execute arbitrary code with the application’s privileges. Root cause: insecure executable loading due to how ...