CVE-2004-0694: Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and po...

Security readout for executives and security teams

This is an old reported buffer overflow in LHA 1.14 and earlier. The supplied record says it can crash the program and may allow code execution, but the attack path is unclear. Business urgency depends on whether LHA is still installed and used on untrusted input or across privilege boundaries. Exposure is most likely on legacy systems with LHA 1.14 or earlier installed, especially automated archive-handling workflows. The supplied data does not identify supported CPEs, operating systems, package names, or exact vulnerable invocation paths. Prioritize as a legacy exposure check, not an emergency, unless LHA handles untrusted archives in privileged automation. The supplied evidence is too incomplete to justify a critical rating or claim active exploitation. Mitigation focus: Inventory systems for LHA and identify versions at or below 1.14.; Review Red Hat advisories and current vendor guidance for applicable package updates.; Remove LHA where it is unused or replace it with a maintained archive tool..

Prepared

Jun 27, 2026, 18:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.