CVE-2007-6175
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via...
CVE-2007-6175 is a medium vulnerability (CVSS 6.6) in Lhaplus, published November 30, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.46%, the 89th percentile. No source names a fixed version.
- Severity
- 6.6 MediumCVSS 2.0, NVD
- Exploit chance
- 3.46%EPSS, 89th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.
- Record
CVE-2007-6175- CVSS 2.0
- 6.6 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.
- Record
CVE-2007-6175- Updated
- 2026-11-02
EUVDEUVD-2007-6144No score
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.
- Record
EUVD-2007-6144- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qxgv-94gq-m36hNo score
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via...
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.
- Record
GHSA-qxgv-94gq-m36h- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
jvn.jp/jp/JVN%2382610488/index.html
securityfocus.com/bid/26531
vupen.com/english/advisories/2007/3960
www7a.biglobe.ne.jp/~schezo/lzh_vul.html
secunia.com/advisories/27734
osvdb.org/40583
exchange.xforce.ibmcloud.com/vulnerabilities/38624
nvd.nist.gov/vuln/detail/CVE-2007-6175
github.com/advisories/GHSA-qxgv-94gq-m36h