Description
Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335.
References
- 25426 third-party-advisory
- 1018148 vdb-entry
- 1018147 vdb-entry
- 1018146 vdb-entry
- ADV-2007-1985 vdb-entry
- 20070601 n.runs-SA-2007.013 - F-Secure Antivirus LZH parsing BufferOverflow Advisory mailing-list
- http://www.f-secure.com/security/fsc-2007-1.shtml
- 36724 vdb-entry
- 24235 vdb-entry
- fsecure-lzh-bo(34575) vdb-entry
- http://www.nruns.com/security_advisory_fsecure_lzh.php