ARJ Software ARK Archiver 3.10.22

CPE Details

ARJ Software ARK Archiver 3.10.22
3.10.22
2015-04-09 12:15 +00:00
2015-04-09 14:47 +00:00

Alerte pour un CPE

Stay informed of any changes for a specific CPE.
Alert management

CPE Name: cpe:2.3:a:arj_software:arj_archiver:3.10.22:*:*:*:*:*:*:*

Informations

Vendor

arj_software

Product

arj_archiver

Version

3.10.22

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2015-0556 2015-04-08 16:00 +00:00 Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive.
5.8
CVE-2015-0557 2015-04-08 16:00 +00:00 Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive.
5.8
CVE-2015-2782 2015-04-08 16:00 +00:00 Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ARJ archive.
7.5
Click on the button to the left (OFF), to authorize the inscription of cookie improving the functionalities of the site. Click on the button to the left (Accept all), to unauthorize the inscription of cookie improving the functionalities of the site.