CVE-2015-2782

Published: Apr 8, 2015Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ARJ archive.

Affected (5)

Products: Debian: Debian Linux · Fedoraproject: Fedora · Arj Software: Arj Archiver

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 20
Fedoraproject Fedora	Version 21
Fedoraproject Fedora	Version 22

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Arj Software Arj Archiver	Version 3.10.22

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (18)

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html

Source: security@debian.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html

Source: security@debian.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.html

Source: security@debian.org

Third Party Advisory

http://www.debian.org/security/2015/dsa-3213

Source: security@debian.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2015:201

Source: security@debian.org

Technical Description

http://www.openwall.com/lists/oss-security/2015/03/28/5

Source: security@debian.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2015/03/29/1

Source: security@debian.org

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/73413

Source: security@debian.org

https://security.gentoo.org/glsa/201612-15

Source: security@debian.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html