CVE-2007-4428: Lhaz

Medium severity, CVSS 6.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Lhaz 1.33 allows remote attackers to execute arbitrary code via unknown vectors, as actively exploited in August 2007 by the Exploit-LHAZ.a gzip file, a different issue than CVE-2006-4116.

Affected products

• Lhaz Lhaz: version 1.33 only

Published 2007-08-20. Last modified 2026-06-16.