Description
Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Lukasz Wojtow · perlremotelinux
https://www.exploit-db.com/exploits/24120
References (10)
Scores
EPSS
0.3795
EPSS Percentile
97.2%
Details
Status
published
Products (3)
tsugio_okamoto/lha
1.14
tsugio_okamoto/lha
1.15
tsugio_okamoto/lha
1.17
Published
Nov 23, 2004
Tracked Since
Feb 18, 2026