SB2007062601 - Buffer overflow in Lhaca File Archiver

Description

This security bulletin contains information about 1 security vulnerability.

1) Buffer overflow (CVE-ID: CVE-2007-3375)

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to boundary error in Lhaca File Archiver when processing .lzh archives. A remote attacker can create a specially crafted .lzh file, trick the victim into opening it, cause stack-based buffer overflow and execute arbitrary code with privileges of the current user.

Successful exploitation of the vulnerability results in compromise of vulnerable system.

Note: this vulnerability is being actively exploited.

Remediation

Install update from vendor's website.

References

• https://www.symantec.com/connect/blogs/beware-lzh
• http://vuln.sg/lhaca121-en.html
• http://park8.wakwak.com/~app/Lhaca/overflow.html