Description
Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive.
References
- http://www7a.biglobe.ne.jp/~schezo/arj_vul.html
- http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20070921
- JVN#70734805 third-party-advisory
- lhaplus-arj-bo(36718) vdb-entry
- 26907 third-party-advisory
- 25754 vdb-entry
- 40582 vdb-entry