KLA10539
Multiple vulnerabilities in Open-source ARJ archiver
Обновлено: 17/06/2019
Дата обнаружения
08/04/2015
Уровень угрозы
Critical
Описание

Buffer overflow, improper strings restriction and other unknown vulnerabilities were found in Open-source ARJ archiver. By exploiting these vulnerabilities malicious users can cause denial of service, execute arbitrary code or write to arbitrary local files. These vulnerabilities can be exploited remotely via a specially designed ARJ archive.

Пораженные продукты

Open-source ARJ archiver 3.10.22

Решение

If you want to stay safe you can choose another archiver. Author does not update product for 10 years.

Оказываемое влияние
?
ACE 
[?]

DoS 
[?]

WLF 
[?]
CVE-IDS