Refine your search

1 vulnerability found for Lhaca by Lhaca

jvndb-2007-000491
Vulnerability from jvndb
Published
2008-05-21 00:00
Modified
2008-05-21 00:00
Severity ?
() - -
Summary
Lhaca LHZ Archive Extended Header Size Processing Buffer Overflow Vulnerability
Details
Lhaca does not process an LHZ archive with an invalid Extended Header Size properly, which could lead to buffer overflow. This problem is reported to be different from the issue identified in JVNDB-2007-000492 (CVE-2007-3375).
Impacted products
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000491.html",
  "dc:date": "2008-05-21T00:00+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T00:00+09:00",
  "description": "Lhaca does not process an LHZ archive with an invalid Extended Header Size properly, which could lead to buffer overflow.\r\nThis problem is reported to be different from the issue identified in JVNDB-2007-000492 (CVE-2007-3375).",
  "link": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000491.html",
  "sec:cpe": {
    "#text": "cpe:/a:lhaca:file_archiver",
    "@product": "Lhaca",
    "@vendor": "Lhaca",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "9.3",
    "@severity": "High",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2007-000491",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3512",
      "@id": "CVE-2007-3512",
      "@source": "CVE"
    },
    {
      "#text": "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3512",
      "@id": "CVE-2007-3512",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/25797",
      "@id": "SA25797",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.frsirt.com/english/advisories/2007/2399",
      "@id": "FrSIRT/ADV-2007-2399",
      "@source": "FRSIRT"
    }
  ],
  "title": "Lhaca LHZ Archive Extended Header Size Processing Buffer Overflow Vulnerability"
}