Description
Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper.
References
- http://www.symantec.com/enterprise/security_response/weblog/2007/06/beware_of_lzh.html
- VU#871497 third-party-advisory
- http://www.symantec.com/security_response/writeup.jsp?docid=2007-062506-5500-99&tabid=1
- lhaca-lzh-bo(35116) vdb-entry
- http://vuln.sg/lhaca121-en.html
- 24604 vdb-entry
- 25826 third-party-advisory