Lhaca File Archiver Unspecified Stack Buffer Overflow Vulnerability

Bugtraq ID:	24604
Class:	Boundary Condition Error
CVE:	CVE-2007-3375
Remote:	Yes
Local:	No
Published:	Jun 25 2007 12:00AM
Updated:	Jul 10 2007 12:37AM
Credit:	This issue was reported by Symantec Security Response. It was detected as part of Trojan.Lhdropper.
Vulnerable:	Lhaca Lhaca 1.20
Not Vulnerable:	Lhaca Lhaca 1.23

Lhaca File Archiver Unspecified Stack Buffer Overflow Vulnerability

Lhaca file archiver is prone to an unspecified stack-based buffer-overflow vulnerability. The application fails to properly decompress malicious LZH archive files.

An attacker can exploit this issue to crash the application and execute arbitrary code within the context of the affected application.

Lhaca 1.20 is vulnerable to this issue; other versions may also be affected.

Lhaca File Archiver Unspecified Stack Buffer Overflow Vulnerability

This issue is currently being actively exploited by the trojan Trojan.Lhdropper. Additional details are available in the references.

Lhaca File Archiver Unspecified Stack Buffer Overflow Vulnerability

Solution:
The vendor released Lhaca 1.23 to address this issue. Please see the references for more information.

Lhaca File Archiver Unspecified Stack Buffer Overflow Vulnerability

References:

• Lhaca Homepage (Lhaca)
  
• Trojan.Lhdropper (Symantec)
  
• Vulnerability Note VU#871497 Lhaca buffer overflow vulnerability (US-CERT)