Lha For Unix
1 CVEs
product
Monthly
Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Integer Overflow
Buffer Overflow
Lha For Unix
NVD
VulDB
CVSS 3.0
9.8
EPSS
0.9%
EPSS 1%
CVSS 9.8
CRITICAL
Act Now
Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Integer Overflow
Buffer Overflow
Lha For Unix
NVD
VulDB