LH
Product
Lha
by Tsugio Okamoto · last CVE Feb 4, 2011
5
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add Lha to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2004-0694
–
3%
Feb 4
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command…
Affected: through 1.14
CVE-2004-0771
–
19%
Nov 23
Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different…
Affected: 1.14; 1.15; 1.17
CVE-2004-0745
–
3%
Sep 28
LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name
Affected: through 1.14
CVE-2004-0234
–
10%
Aug 18
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local…
Affected: 1.14; 1.15; 1.17
CVE-2004-0235
–
4%
Aug 18
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1)
Affected: 1.14; 1.15; 1.17
Showing 5