>> LHa Archive Handling Multiple Code Execution and Denial of Service Vulnerabilities
Title : LHa Archive Handling Multiple Code Execution and Denial of Service Vulnerabilities VUPEN ID : VUPEN/ADV-2006-4760 CVE ID : CVE-2006-4335 - CVE-2006-4336 - CVE-2006-4337 - CVE-2006-4338
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2006-11-29
Technical Description
Multiple vulnerabilities have been identified in LHa, which could be exploited by attackers to execute arbitrary commands or cause a denial of service.
The first issue is due an infinite loop in the "read_pt_len()", "read_c_len()", "decode_c_st1()", and "decode_p_st1()" [huf.c] functions when unpacking malformed archives, which could be exploited by attackers to crash a vulnerable application.
The second flaw is due to a buffer overflow error in the "make_table()" [maketbl.c] function when unpacking malformed archives, which could be exploited by attackers to crash a vulnerable application or execute arbitrary commands.
