Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability

Bugtraq ID:	19263
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 31 2006 12:00AM
Updated:	Aug 01 2006 01:11PM
Credit:	Tan Chew Keong is credited with the discovery of these vulnerabilities.
Vulnerable:	Lhaplus Lhaplus 1.52
Not Vulnerable:	Lhaplus Lhaplus 1.53

Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability

Lhaplus is prone to a buffer-overflow vulnerability in its LHA extended header handling routine.

A successful attack can allow a remote attacker to corrupt process memory by triggering an overflow condition when Lhaplus reads the extended header in an LZH file.

This vulnerability reportedly affects version 1.52 (Japanese) of Lhaplus. Previous versions may also be vulnerable.

Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability

The researcher has developed a functional exploit but it is not publicly available.

Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability

Solution:
The vendor has released updated version 1.53 of Lhaplus. It reportedly fixes this vulnerability. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability

References:

• Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability (vuln.sg)
  
• Vendor Homepage (Lhaplus)