| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-4033 | 5.1 |
Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LZH archive with a long header, as specified by the extendedHeaderSize.
|
17-10-2018 - 21:33 | 09-08-2006 - 22:04 | |
| CVE-2017-2158 | 4.3 |
Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive.
|
02-02-2018 - 18:22 | 12-01-2018 - 14:29 | |
| CVE-2010-3158 | 6.9 |
Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory. Per: http://cwe.mitre.org/data/definitions/426.html
'CWE-426: Untrusted Search Pa
|
17-08-2017 - 01:32 | 19-10-2010 - 20:00 | |
| CVE-2008-2021 | 7.5 |
Heap-based buffer overflow in Lhaplus before 1.57 allows remote attackers to execute arbitrary code via a long comment field in a ZOO archive.
|
08-08-2017 - 01:30 | 30-04-2008 - 12:05 | |
| CVE-2007-6175 | 6.6 |
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.
|
29-07-2017 - 01:34 | 30-11-2007 - 00:46 | |
| CVE-2007-5048 | 7.5 |
Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive.
|
29-07-2017 - 01:33 | 24-09-2007 - 00:17 | |
| CVE-2015-0907 | 6.8 |
Buffer overflow in Lhaplus before 1.70 allows remote attackers to execute arbitrary code via a crafted archive.
|
15-04-2015 - 20:16 | 15-04-2015 - 10:59 | |
| CVE-2015-0906 | 5.8 |
Directory traversal vulnerability in Lhaplus before 1.70 allows remote attackers to write to arbitrary files via a crafted archive.
|
15-04-2015 - 19:01 | 15-04-2015 - 10:59 | |
| CVE-2010-2368 | 6.9 |
Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Per: http://cwe.mitre.org/data/definitions/426.html
'CWE-426: Untrusted Search Path'
|
21-10-2010 - 05:58 | 18-10-2010 - 17:00 |