CVE-2015-0556

Open-source ARJ archiver 3.10.22 is affected by CVE-2015-0556. The vulnerability allows a remote attacker to trigger a directory traversal via a symlink attack during unpacking of an ARJ archive, potentially writing to or exposing files outside the intended directory. Technical details consistent...

CVE-2015-2782

CVE-2015-2782 is a buffer overflow in the Open-source ARJ archiver (version 3.10.22) that could crash the application or allow arbitrary code execution via a crafted ARJ archive. Connected documents confirm affected component/version and the underlying issue; advisories across multiple distributi...

CVE-2015-0557

ARJ archiver 3.10.22 is affected by CVE-2015-0557: ARJ does not fully strip leading slashes from file paths in archives, enabling absolute path traversal and potential writing to arbitrary files when processing specially crafted ARJ archives. Impact observed across multiple distributions (e.g., D...