Buffer overflow in Ponsoftware Explzh
CVE-2010-2434
Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion.
Vulnerability class: Buffer Overflow
EPSS: 0.054 (91.8th percentile) — read the EPSS interpretation.
Affected products
- Ponsoftware Explzh
- N/a — versions n/a
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_OSVDB, vdb-entry, Broken Link)
- vultures@jpcert.or.jp (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
- vultures@jpcert.or.jp (x_refsource_CONFIRM, Vendor Advisory)
- vultures@jpcert.or.jp (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory, Vendor Advisory)
- vultures@jpcert.or.jp (x_refsource_JVNDB, Third Party Advisory, VDB Entry, third-party-advisory)
- vultures@jpcert.or.jp (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_XF)
- vultures@jpcert.or.jp (x_refsource_JVN, Third Party Advisory, third-party-advisory, Vendor Advisory)