CVE-2007-6175 Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.
MediumCVSS 6.6
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lhaplus | = 1.55 | No fix listed |
References
- JVN#82610488 third-party-advisory
- 40583 vdb-entry
- 27734 third-party-advisory vendor-advisory
- 26531 patch vdb-entry
- ADV-2007-3960 vdb-entry
- www7a.biglobe.ne.jp
- lhaplus-lzh-bo(38624) vdb-entry