CVE-2005-3051: Igor Pavlov 7-Zip

High severity, CVSS 9.3. EPSS: 6.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26 BETA, as used in products including Turbo Searcher, allows remote attackers to execute arbitrary code via a large ARJ block.

Affected products

• Igor Pavlov 7-Zip: version 3.13 only; version 4.23 only; version 4.26_beta only

Published 2005-09-24. Last modified 2026-06-16.