CVE-2010-2434 | BDVDB-2026-42343 Detail
Description#
Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://osvdb.org/65666
- http://www.securityfocus.com/bid/41025
- http://www.ponsoftware.com/archiver/bug.htm#lzh_bufover
- http://secunia.com/advisories/40324
- http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000026.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59624
- http://jvn.jp/en/jp/JVN34729123/index.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.