CVE-2004-0694
Fixed in a distro release EPSS 3%
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
Products: tsugio_okamoto lha
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | lha | 0:1.14i-10.4 |
| Red Hat Enterprise Linux 3 | lha-debuginfo | 0:1.14i-10.4 |