CVE-2006-4116

no score yetEPSS 3.6%

lhaz lhaz: no CVSS score yet. EPSS 3.6% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in (1) an LHZ archive, when saving the filename during extraction; and (2) an LHZ archive with an invalid CRC checksum, when constructing an error message.

EPSS: 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
Published: 2006-08-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

lhaz:lhaz

References

http://secunia.com/advisories/21348
http://securityreason.com/securityalert/1378
http://vuln.sg/lhaz131-en.html
http://www.chitora.jp/lhaz.html
http://www.securityfocus.com/archive/1/442445/100/0/threaded

Check your stack JSON