CVE-2004-0694: Buffer Overflow
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0694?
CVE-2004-0694 is classified as a high severity vulnerability due to its potential to cause denial of service and arbitrary code execution.
How do I fix CVE-2004-0694?
To mitigate CVE-2004-0694, users should upgrade their LHA software to version 1.15 or later, which addresses this vulnerability.
What software is affected by CVE-2004-0694?
CVE-2004-0694 affects LHA version 1.14 and earlier versions developed by Tsugio Okamoto.
What type of vulnerability is CVE-2004-0694?
CVE-2004-0694 is a buffer overflow vulnerability that can be exploited through command line processing.
Can CVE-2004-0694 lead to remote code execution?
Yes, CVE-2004-0694 has the potential for remote attackers to execute arbitrary code on affected systems.