Description
Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion.
References
- 65666 vdb-entry
- 41025 vdb-entry
- http://www.ponsoftware.com/archiver/bug.htm#lzh_bufover
- 40324 third-party-advisory
- JVNDB-2010-000026 third-party-advisory
- explzh-lhaprocessing-bo(59624) vdb-entry
- JVN#34729123 third-party-advisory