CVE-2004-0771: Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary co...

Security readout for executives and security teams

CVE-2004-0771 describes a possible buffer overflow in the LHA archive utility. A specially long working-directory command-line option could allow arbitrary code execution, but the record notes the issue may depend on LHA being used with elevated privileges or across a security boundary. Exposure is most plausible on legacy systems with LHA installed, especially automated archive-processing workflows, privileged wrappers, or setuid-like deployments. The provided affected-product data is incomplete and does not identify exact versions. Treat this as a legacy-software exposure review, not an emergency internet-wide incident. Prioritize environments where old archive tooling runs automatically or with elevated privileges. Mitigation focus: Check Red Hat, Gentoo, Fedora, and other vendor advisories for corrected LHA packages.; Update or remove LHA where vendor guidance indicates exposure.; Avoid using LHA in privileged wrappers or automated processing of untrusted input..

Prepared

Jun 30, 2026, 04:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.