CVE-2004-0771

CVE-2004-0771 describes a critical buffer overflow vulnerability in the extract_one function of LHA, specifically affecting tsugio_okamoto lha versions. This flaw allows attackers to execute arbitrary code by providing an excessively long working directory (w) command-line option. With a CVSS score of 10.0, this vulnerability is highly severe, requiring no authentication or complex attack vectors, and potentially leading to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog and lacking social media or media coverage, exploit code is publicly available on ExploitDB, indicating a potential for exploitation despite no evidence of active widespread attacks.