CVE-2017-2158 Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive.
LowCVSS 3.3
EPSS 0.63%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lhaplus project lhaplus | <= 1.7.3 | No fix listed |
| Schezo Lhaplus | = Version 1.73 and earlier | No fix listed |
References
- www7a.biglobe.ne.jp patch vendor-advisory
- JVN#57842148 third-party-advisory vdb-entry