CVE Catalog
CVE-2016-1925
CriticalSummary
An integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer overflow.
Risk Assessment
An attacker could exploit this vulnerability to cause a buffer overflow, potentially leading to the execution of arbitrary code or system instability.
Recommendation
It is recommended to update the lha software to the latest version to mitigate this vulnerability and to monitor systems for unauthorized access attempts.
Original NVD description (English source)
Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer overflow.