CVE-2007-3375
EXPLOITEDLhaca File Archiver < 1.21 - Stack-based Buffer Overflow via Crafted LZH Archive
Title source: llmExploitation Summary
CVE-2007-3375 has been observed exploited in the wild (reported by VulnCheck KEV).
Description
Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper.
References (7)
Core 7
Core References
Third Party Advisory x_refsource_misc
http://www.symantec.com/enterprise/security_response/weblog/2007/06/beware_of_lzh.html
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/871497
Third Party Advisory x_refsource_misc
http://www.symantec.com/security_response/writeup.jsp?docid=2007-062506-5500-99&tabid=1
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35116
Various Sources x_refsource_misc
http://vuln.sg/lhaca121-en.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/24604
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/25826
Scores
EPSS
0.0470
EPSS Percentile
90.8%
Details
VulnCheck KEV
2007-07-06
CWE
CWE-119
Status
published
Products (1)
lhaca/file_archiver
< 1.20
Published
Jun 25, 2007
Tracked Since
Feb 18, 2026