CVEs-PoC/2006/CVE-2006-4033.md

CVE-2006-4033

Description

Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LZH archive with a long header, as specified by the extendedHeaderSize.

POC

Reference

• http://securityreason.com/securityalert/1351
• http://securityreason.com/securityalert/1351
• http://vuln.sg/lhaplus152-en.html
• http://vuln.sg/lhaplus152-en.html

Github

No PoCs found on GitHub currently.