Every CVE Search/ Get API key

CVE-2007-6175

Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via...

6.6 Medium

Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.

Exploit likelihood

3.46%Down 4.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.6

Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.

Record
CVE-2007-6175
CVSS 2.0
6.6 MediumAV:N/AC:H/Au:N/C:P/I:P/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.

Record
CVE-2007-6175
Updated
2026-11-02
EUVDEUVD-2007-6144 No score

Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.

Record
EUVD-2007-6144
Updated
2026-11-03
GitHub AdvisoriesGHSA-qxgv-94gq-m36h No score

Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via...

Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.

Record
GHSA-qxgv-94gq-m36h
Weakness
CWE-119
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
aliases, references, titleGitHub Advisories
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-6175 is a medium vulnerability (CVSS 6.6) in Lhaplus, published November 30, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.46%, the 89th percentile. No source names a fixed version.

References

MoveEnter Open