CVE-2006-4116 - Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in (1) an LHZ archive, when saving the filename during extraction; and (2) an LHZ archive with an invalid CRC checksum, when constructing an error message

Back Back to CVE browser

MEDIUM

Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in (1) an LHZ archive, when saving the filename during extraction; and (2) an LHZ archive with an invalid CRC checksum, when constructing an error message

Published Aug 14, 2006

5.1

MEDIUM

CVSS 2.0

EPSS 3.59%

Description

Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in (1) an LHZ archive, when saving the filename during extraction; and (2) an LHZ archive with an invalid CRC checksum, when constructing an error message.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (10)

http://secunia.com/advisories/21348
third-party-advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
http://securityreason.com/securityalert/1378
third-party-advisoryx_refsource_SREASON
http://vuln.sg/lhaz131-en.html
x_refsource_MISCExploitPatch
http://www.chitora.jp/lhaz.html
x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/442445/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19377
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/3173
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4106
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28282
vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/28283
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/21348		third-party-advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
http://securityreason.com/securityalert/1378		third-party-advisoryx_refsource_SREASON
http://vuln.sg/lhaz131-en.html		x_refsource_MISCExploitPatch
http://www.chitora.jp/lhaz.html		x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/442445/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19377		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/3173		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4106		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28282		vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/28283		vdb-entryx_refsource_XF