Vulnerabilities > Lhaz

DATE CVE VULNERABILITY TITLE RISK
2007-08-20 CVE-2007-4428 Remote Code Execution vulnerability in Lhaz 1.33
Lhaz 1.33 allows remote attackers to execute arbitrary code via unknown vectors, as actively exploited in August 2007 by the Exploit-LHAZ.a gzip file, a different issue than CVE-2006-4116.
network
lhaz
6.8
2006-08-14 CVE-2006-4116 Buffer Overflow vulnerability in LHAZ LHA Long
Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in (1) an LHZ archive, when saving the filename during extraction; and (2) an LHZ archive with an invalid CRC checksum, when constructing an error message.
network
high complexity
lhaz
5.1