CVE-2015-2782: Buffer Overflow

Published Apr 8, 2015

Updated

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ARJ archive.

Affected Software

6 affected componentsFixes available

debian/arj

3.10.22-243.10.22-263.10.22-27

Debian Debian Linux=7.0

Fedoraproject Fedora=20

Fedoraproject Fedora=21

Fedoraproject Fedora=22

Arj Software Arj Archiver=3.10.22

Event History

Apr 8, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2782?

The severity of CVE-2015-2782 is classified as critical due to its potential for causing denial of service and arbitrary code execution.

How do I fix CVE-2015-2782?

To fix CVE-2015-2782, you should upgrade to a version of ARJ archiver that is not affected, such as versions later than 3.10.22-27.

What software is affected by CVE-2015-2782?

CVE-2015-2782 affects the ARJ archiver version 3.10.22 and specific versions of Debian and Fedora Linux.

Can CVE-2015-2782 be exploited remotely?

Yes, CVE-2015-2782 can be exploited remotely by sending a crafted ARJ archive to the vulnerable software.

What types of attacks can CVE-2015-2782 lead to?

CVE-2015-2782 can lead to denial of service attacks or allow attackers to execute arbitrary code on the affected system.