CVE-2007-3375

CVE-2007-3375 describes a stack-based buffer overflow vulnerability in Lhaca File Archiver versions prior to 1.21. This flaw allows user-assisted remote attackers to execute arbitrary code by enticing a user to open a specially crafted LZH archive, as demonstrated by malware like Trojan.Lhdropper. With a CVSS score of 6.8 (medium severity), successful exploitation requires user interaction (AC:M) but can lead to partial confidentiality, integrity, and availability compromise (C:P/I:P/A:P). While the vulnerability has been exploited by malware in the past, there is no current evidence of active exploitation, public exploit code (Metasploit, ExploitDB), or significant community discussion surrounding this older CVE.