CVE-2004-0694
NONE EPSS 83.1%
Published Feb 4, 201115y ago · Modified Jun 16, 20262w ago
Published Feb 4, 2011 15y ago
Last Modified Jun 16, 2026 2w ago
Description
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
Threat Intelligence
EPSS Exploit Probability
83.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| tsugio_okamoto | lha | * | ≤1.14 |
References 3
- redhat.com http://www.redhat.com/support/errata/RHSA-2004-323.html
- redhat.com http://www.redhat.com/support/errata/RHSA-2004-440.html
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9981
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.