← Back

Lhaz

lhaz

Vendor: Lhaz • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-4428
1Lhaz
1Lhaz
Apr 23, 2026
Aug 20, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Lhaz 1.33 allows remote attackers to execute arbitrary code via unknown vectors, as actively exploited in August 2007 by the Exploit-LHAZ.a gzip file, a different issue than CVE-2006-4116.
CVE-2006-4116
1Lhaz
1Lhaz
Apr 16, 2026
Aug 14, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in (1) an LHZ archive, when saving the filename during extraction; and (2) an LHZ arch...Show more
Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in (1) an LHZ archive, when saving the filename during extraction; and (2) an LHZ archive with an invalid CRC checksum, when constructing an error message.Show less