Threat Investigation
Request a demo

CVE-2014-4607

High

Description

Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.

SeverityHigh
CVSS8.8
Exploit probability—
ProductOberhumer Liblzo2
PublishedFeb 12, 2020
First seenFeb 12, 2020

How to fix

Update
  • oberhumer liblzo22.07 or later
  • oberhumer lzo22.07 or later

Affected products

ProductAffected versionsFixed in
oberhumer liblzo2v < 2.072.07
oberhumer lzo2v < 2.072.07

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.