CVE-2004-0234: Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in produ...

Security readout for executives and security teams

CVE-2004-0234 is an old LHA archive parsing flaw. A specially crafted LHA archive with very long file or directory names can overflow memory when tested or extracted, potentially letting an attacker run code. Business risk is highest where mail gateways, scanners, or servers automatically process LHA files. Exposure is most likely on legacy Unix/Linux systems with vulnerable LHA packages, and on appliances or security gateways that embed LHA archive handling. Modern exposure depends on whether LHA parsing is still present and reachable through email, file upload, antivirus, or archive inspection workflows. Treat as high priority for legacy and gateway environments because archive parsing can happen automatically before a user sees the file. If LHA handling is absent or blocked, urgency is lower but should be documented. Mitigation focus: Apply vendor LHA updates from relevant OS or appliance advisories.; Check embedded products that process LHA archives, especially mail-security gateways.; Disable or quarantine LHA archive processing where no supported fix exists..

Prepared

Jun 30, 2026, 05:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.