CVE-2004-0234

Fixed in a distro release EPSS 10%

Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.

Published 2004-05-05 · CVE record · OSV

Products: clearswift mailsweeper, f-secure_anti-virus, f-secure_for_firewalls, f-secure_internet_security, f-secure_personal_express, f-secure internet_gatekeeper, rarlab winrar, redhat lha, sgi propack, stalker cgpmcafee, tsugio_okamoto lha, winzip, redhat fedora_core

Distro releases