CVE

Id
20220  
CVE No.
CVE-2006-4116  
Status
Candidate  
Description
Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in (1) an LHZ archive, when saving the filename during extraction; and (2) an LHZ archive with an invalid CRC checksum, when constructing an error message.  
Phase
Assigned (20060814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187483 20220 CVE-2006-4116 BUGTRAQ:20060807 [vuln.sg] Lhaz LHA Long Filename Buffer Overflow Vulnerability  View
187484 20220 CVE-2006-4116 URL:http://www.securityfocus.com/archive/1/archive/1/442445/100/0/threaded  View
187485 20220 CVE-2006-4116 MISC:http://vuln.sg/lhaz131-en.html  View
187486 20220 CVE-2006-4116 CONFIRM:http://www.chitora.jp/lhaz.html  View
187487 20220 CVE-2006-4116 BID:19377  View
187488 20220 CVE-2006-4116 URL:http://www.securityfocus.com/bid/19377  View
187489 20220 CVE-2006-4116 VUPEN:ADV-2006-3173  View
187490 20220 CVE-2006-4116 URL:http://www.vupen.com/english/advisories/2006/3173  View
187491 20220 CVE-2006-4116 SECUNIA:21348  View
187492 20220 CVE-2006-4116 URL:http://secunia.com/advisories/21348  View
187493 20220 CVE-2006-4116 SREASON:1378  View
187494 20220 CVE-2006-4116 URL:http://securityreason.com/securityalert/1378  View
187495 20220 CVE-2006-4116 XF:lhaz-error-bo(28283)  View
187496 20220 CVE-2006-4116 URL:http://xforce.iss.net/xforce/xfdb/28283  View
187497 20220 CVE-2006-4116 XF:lhaz-long-filename-bo(28282)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58816 JVNDB-2006-001082 GeheimChaos における SQL インジェクションの脆弱性 GeheimChaos には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4118 20220 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001082.html  View