Lhaplus is a niche file-compression and archive-utility product with a concentrated vulnerability footprint centered on memory-safety and path-handling issues. The recurring weakness classes—buffer-boundary violations, path traversal, and related input-validation flaws—reflect the attack surface inherent to archive parsers that process untrusted file structures. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Lhaplus over time
Signals from CVEs in this vendor scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-2021HIGH Heap-based buffer overflow in Lhaplus before 1.57 allows remote attackers to execute arbitrary code via a long comment field in a ZOO archive. | Apr 30, 2008 | 7.5 | 26 | NO | NO |
CVE-2007-5048HIGH Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive. | Sep 24, 2007 | 7.5 | 22 | NO | NO |
CVE-2010-3158MEDIUM Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory. | Oct 19, 2010 | 6.9 | 21 | NO | NO |
CVE-2010-2368MEDIUM Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse DLL in the current working directory. | Oct 18, 2010 | 6.9 | 21 | NO | NO |
CVE-2015-0907MEDIUM Buffer overflow in Lhaplus before 1.70 allows remote attackers to execute arbitrary code via a crafted archive. | Apr 15, 2015 | 6.8 | 19 | NO | NO |
CVE-2007-6175MEDIUM Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048. | Nov 30, 2007 | 6.6 | 18 | NO | NO |
Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive. | Jan 12, 2018 | 3.3 | 16 | NO | NO |
CVE-2015-0906MEDIUM Directory traversal vulnerability in Lhaplus before 1.70 allows remote attackers to write to arbitrary files via a crafted archive. | Apr 15, 2015 | 5.8 | 16 | NO | NO |
CVE-2006-4033MEDIUM Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LZH archive with a long header, a | Aug 9, 2006 | 5.1 | 16 | NO | NO |
Signals from CVEs in this vendor scope (9 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Lhaplus.
Media articles that mention a CVE ID that affects a product developed by Lhaplus — matched by CVE ID, not by vendor name.