CVE-2015-2782

HOCH 7.5CVE-2015-2782 · Published 08/04/2015 · updated 17/06/2026

Kurz gesagt

CVE-2015-2782 ist eine Schwachstelle (HOCH (CVSS 7.5)) in arj archiver (arj software).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 5.8%, höher als bei 93.2% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
arj archiver arj_software	`= 3.10.22`	No fix yet

Description

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ARJ archive.

References

lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.html · Third Party Advisory
debian.org/security/2015/dsa-3213 · Third Party Advisory
mandriva.com/security/advisories · Technical Description
openwall.com/lists/oss-security/2015/03/28/5 · Mailing List
openwall.com/lists/oss-security/2015/03/29/1 · Mailing List
securityfocus.com/bid/73413
security.gentoo.org/glsa/201612-15

Weitere Schwachstellen in arj archiver

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free