Vulnerability Spotlight: Lhasa Integer Underflow Exploit
Cisco Talos disclosed CVE-2016-2347, an integer underflow in the Lhasa LZH/LHA decompression tool and library, found by Marcin Noga; the software checks that header values are not too large but not that header length is too small. A file with an...