Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains a (1) file or (2) directory with a long LHA extended header (3) an LHA archive in which the \temporary pathname\ field for decompressed output is greater than 2 bytes or (4) an LHA archive with a long filename.