cpe:/a:lhaplus:lhaplus:1.52 cpe:/a:lhaplus:lhaplus:1.53 CVE-2007-5048 2007-09-23T20:17:00.000-04:00 2017-07-28T21:33:21.457-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2007-09-24T13:41:00.000-04:00 ALLOWS_USER_ACCESS BID 25754 SECUNIA 26907 OSVDB 40582 JVN JVN#70734805 MISC http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20070921 CONFIRM http://www7a.biglobe.ne.jp/~schezo/arj_vul.html XF lhaplus-arj-bo(36718) Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive.