CVE-2015-2782: Arj Software Arj Archiver

High severity, CVSS 7.5. EPSS: 5.8% chance of exploitation in the next 30 days.

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ARJ archive.

Affected products

• Arj Software Arj Archiver: version 3.10.22 only
• Debian Debian Linux: version 7.0 only
• Fedoraproject Fedora: version 20 only; version 21 only; version 22 only

Published 2015-04-08. Last modified 2026-06-17.