CVE-2007-5048 Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive.
HighCVSS 7.5
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lhaplus | = 1.52 | No fix listed |
| lhaplus | = 1.53 | No fix listed |
References
- JVN#70734805 third-party-advisory
- 40582 vdb-entry
- 26907 patch third-party-advisory vendor-advisory
- www.fourteenforty.jp exploit
- 25754 patch vdb-entry
- www7a.biglobe.ne.jp
- lhaplus-arj-bo(36718) vdb-entry