Back to CVE Browser

CVE-2004-0771

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0600%

EPSS Percentile25.93th

PublishedNov 23, 2004

Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.

Affected Platforms (CPE)

📦

Tsugio Okamoto

Lha

= 1.14

📦

Tsugio Okamoto

Lha

= 1.15

📦

Tsugio Okamoto

Lha

= 1.17

References & Advisories

🔗 http://bugs.gentoo.org/show_bug.cgi?id=51285

🔗 http://marc.info/?l=bugtraq&m=108668791510153

🔗 http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml

🔗 http://www.redhat.com/support/errata/RHSA-2004-323.html

🔗 http://www.redhat.com/support/errata/RHSA-2004-440.html

🔗 http://www.securityfocus.com/archive/1/363418

🔗 http://www.securityfocus.com/bid/10354

🔗 https://bugzilla.fedora.us/show_bug.cgi?id=1833

Related Vulnerabilities

CVE-2004-074510.0

LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name.

CVE-2004-023410.0

Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda S...

CVE-2004-076910.0

Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ a...

CVE-2008-714410.0

Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) AC...