A vulnerability has been reported in various F-Secure products, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the processing of LHA archives and can be exploited to cause a buffer overflow when decompressing a specially crafted archive.

The vulnerability is related to #1 in:
SA21996

Successful exploitation may allow execution of arbitrary code.

Solution
Apply hotfixes.
Further details available to Secunia VIM customers

Provided and/or discovered by
Originally discovered by Tavis Ormandy of Google Security Team in gzip.

The vendor credits Sergio Alvarez of n.runs AG for providing additional information.

Changelog
Further details available to Secunia VIM customers

Original Advisory
F-Secure:
http://www.f-secure.com/security/fsc-2007-1.shtml

n.runs AG:
http://www.nruns.com/advisories/%5Bn.runs-SA-2007.013%5D%20-%20F-Secure%20Antivirus%20LZH%20parsing%20BufferOverflow%20Advisory.txt

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers