Unscored DSA-3213-1 3 CVEs

arj - security update

Published Apr 6, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	arj	3.10.22-10+deb7u1

Vulnerabilities 3

Unscored —

CVE-2015-0556

Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in…

arj Debian

Apr 8, 2015
Unscored —

CVE-2015-0557

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to …

arj Debian

Apr 8, 2015
Unscored —

CVE-2015-2782

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or pos…

arj Debian

Apr 8, 2015