Lhaca.LZH.Archive.Extended.Header.Size.Buffer.Overflow

Description

This indicates a possible exploit of a buffer overflow vulnerability in Lhaca File Archiver.
This flaw is caused by a buffer overflow error when processing an LZH file with an overly large "Extended Header Size" value (more than 255 bytes).

Affected Products

Lhaca version 1.21 and prior.

Impact

The execution of arbitrary code on the system.

Recommended Actions

Upgrade to Lhaca version 1.23 :

References