Description
Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LZH archive with a long header, as specified by the extendedHeaderSize.
References
- lhaplus-lzh-header-bo(28102) vdb-entry
- 21256 third-party-advisory
- 20060801 [vuln.sg] Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability mailing-list
- 19263 vdb-entry
- 27667 vdb-entry
- http://www7a.biglobe.ne.jp/~schezo/
- 1016615 vdb-entry
- http://vuln.sg/lhaplus152-en.html
- 1351 third-party-advisory
- ADV-2006-3076 vdb-entry