critical10.0

CVE-2004-0234

Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote at…

Impact

Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.

Affected products

Vendor	Product	Affected versions
Clearswift	Mailsweeper	Versions 4.0, 4.1, 4.2, 4.3, 4.3.3, 4.3.4
F-Secure	F-Secure Anti-Virus	Versions 4.51, 4.52, 4.60, 5.5, 5.41, 5.42
F-Secure	F-Secure For Firewalls	Version 6.20
F-Secure	F-Secure Internet Security	Versions 2003, 2004
F-Secure	F-Secure Personal Express	Versions 4.5, 4.6, 4.7
F-Secure	Internet Gatekeeper	Versions 6.31, 6.32
Rarlab	Winrar	Version 3.20
Redhat	Lha	Version 1.14i-9
Sgi	Propack	Versions 2.4, 3.0
Stalker	Cgpmcafee	Version 3.2
Tsugio Okamoto	Lha	Versions 1.14, 1.15, 1.17
Winzip	Winzip	Version 9.0

Weakness classification

CWE-119

Impact

Affected products

Weakness classification

References