CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
96.1%
Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335.
osvdb.org/36724
secunia.com/advisories/25426
securitytracker.com/id?1018147
www.f-secure.com/security/fsc-2007-1.shtml
www.nruns.com/security_advisory_fsecure_lzh.php
www.securityfocus.com/archive/1/470256/100/0/threaded
www.securityfocus.com/bid/24235
www.securitytracker.com/id?1018146
www.securitytracker.com/id?1018148
www.vupen.com/english/advisories/2007/1985
exchange.xforce.ibmcloud.com/vulnerabilities/34575