CVE-2015-2782

Опубликовано: 08 апр. 2015

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ARJ archive.

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.html
Third Party Advisory
http://www.debian.org/security/2015/dsa-3213
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:201
Technical Description
http://www.openwall.com/lists/oss-security/2015/03/28/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/03/29/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/73413
https://security.gentoo.org/glsa/201612-15
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.html
Third Party Advisory
http://www.debian.org/security/2015/dsa-3213
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:201
Technical Description
http://www.openwall.com/lists/oss-security/2015/03/28/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/03/29/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/73413
https://security.gentoo.org/glsa/201612-15

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:arj_software:arj_archiver:3.10.22:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.05848

Низкий

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2015-2782

ubuntu

больше 11 лет назад

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ARJ archive.

CVE-2015-2782

debian

больше 11 лет назад

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote atta ...

GHSA-8c9q-qgmw-7cvm

github

больше 4 лет назад

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ARJ archive.

ALT-PU-2022-2941

altlinux

около 4 лет назад

ALT-PU-2022-2941: package `arj` update to version 3.10.22-alt9

ALT-PU-2022-2889

altlinux

около 4 лет назад

ALT-PU-2022-2889: package `arj` update to version 3.10.22-alt8

EPSS

Процентиль: 93%

0.05848

Низкий

7.5 High

CVSS2

Дефекты

CWE-119