CVE-2015-0556: Arj Software Arj Archiver

Medium severity, CVSS 5.8. EPSS: 3.8% chance of exploitation in the next 30 days.

Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive.

Affected products

• Arj Software Arj Archiver: up to and including 3.10.22
• Fedoraproject Fedora: version 20 only; version 21 only; version 22 only

Published 2015-04-08. Last modified 2026-06-17.