CVE-2004-0234

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-08-18 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.

Affected products

Clearswift Mailsweeper: 4.0, 4.1, 4.2, 4.3, 4.3.3, 4.3.4 (+8)
F-Secure Anti-Virus: 4.51, 4.52, 4.60, 5.5, 5.41, 5.42 (+4)
F-Secure For Firewalls: 6.20
F-Secure Internet Security: 2003, 2004
F-Secure Personal Express: 4.5, 4.6, 4.7
F-Secure Internet Gatekeeper: 6.31, 6.32
WinRAR: 3.20
RedHat Fedora Core: core_1.0
RedHat Lha: 1.14i-9
Sgi Propack: 2.4, 3.0
Stalker Cgpmcafee: 3.2
Tsugio Okamoto Lha: 1.14, 1.15, 1.17
WinZip Computing WinZip: 9.0

References

Get alerted when CVE-2004-0234 or the next vulnerability affects your stack