CVE-2006-4116

Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in (1) an LHZ archive, when saving the filename during extraction; and (2) an LHZ archive with an invalid CRC checksum, when constructing an error message.

Date published : 2006-08-14

http://www.securityfocus.com/bid/19377

http://www.securityfocus.com/archive/1/442445/100/0/threaded