lhaplus records

8 published records for vendor lhaplus.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 5
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer4
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2007-5048No exploit	Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive.lhaplus · lhaplus · CWE-119 pre-auth RCE Memory safety	High7.5	—	4.1%	Sep 23, 2007
31Monitor	CVE-2008-2021No exploit	Heap-based buffer overflow in Lhaplus before 1.57 allows remote attackers to execute arbitrary code via a long comment field in a ZOO archivlhaplus · lhaplus · CWE-119 pre-auth RCE Memory safety	High7.5	—	3.4%	Apr 30, 2008
28Monitor	CVE-2015-0907No exploit	Buffer overflow in Lhaplus before 1.70 allows remote attackers to execute arbitrary code via a crafted archive.lhaplus · lhaplus · CWE-119 pre-auth RCE Memory safety	Medium6.8	—	2.7%	Apr 15, 2015
27Monitor	CVE-2007-6175No exploit	Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector lhaplus · lhaplus · CWE-119 pre-auth RCE Memory safety	Medium6.6	—	3.4%	Nov 29, 2007
27Monitor	CVE-2010-2368No exploit	Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse DLL in the current workilhaplus · lhaplus Local privilege escalation	Medium6.9	—	0.2%	Oct 18, 2010
27Monitor	CVE-2010-3158No exploit	Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the clhaplus · lhaplus Local privilege escalation	Medium6.9	—	0.2%	Oct 19, 2010
23Monitor	CVE-2015-0906No exploit	Directory traversal vulnerability in Lhaplus before 1.70 allows remote attackers to write to arbitrary files via a crafted archive.lhaplus · lhaplus · CWE-22 Pre-auth Path traversal	Medium5.8	—	1.5%	Apr 15, 2015
22Monitor	CVE-2006-4033No exploit	Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code lhaplus · lhaplus pre-auth RCE	Medium5.1	—	5.0%	Aug 9, 2006

CVE-2007-5048
31Monitor
Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive.
HighCVSS 7.5No exploitEPSS 4%
- pre-auth RCE
- Memory safety
lhaplus · lhaplusSep 23, 2007
CVE-2008-2021
31Monitor
Heap-based buffer overflow in Lhaplus before 1.57 allows remote attackers to execute arbitrary code via a long comment field in a ZOO archiv
HighCVSS 7.5No exploitEPSS 3%
- pre-auth RCE
- Memory safety
lhaplus · lhaplusApr 30, 2008
CVE-2015-0907
28Monitor
Buffer overflow in Lhaplus before 1.70 allows remote attackers to execute arbitrary code via a crafted archive.
MediumCVSS 6.8No exploitEPSS 2%
- pre-auth RCE
- Memory safety
lhaplus · lhaplusApr 15, 2015
CVE-2007-6175
27Monitor
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector
MediumCVSS 6.6No exploitEPSS 3%
- pre-auth RCE
- Memory safety
lhaplus · lhaplusNov 29, 2007
CVE-2010-2368
27Monitor
Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse DLL in the current worki
MediumCVSS 6.9No exploitEPSS 0%
- Local privilege escalation
lhaplus · lhaplusOct 18, 2010
CVE-2010-3158
27Monitor
Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the c
MediumCVSS 6.9No exploitEPSS 0%
- Local privilege escalation
lhaplus · lhaplusOct 19, 2010
CVE-2015-0906
23Monitor
Directory traversal vulnerability in Lhaplus before 1.70 allows remote attackers to write to arbitrary files via a crafted archive.
MediumCVSS 5.8No exploitEPSS 1%
- Pre-auth
- Path traversal
lhaplus · lhaplusApr 15, 2015
CVE-2006-4033
22Monitor
Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code
MediumCVSS 5.1No exploitEPSS 5%
- pre-auth RCE
lhaplus · lhaplusAug 9, 2006