• info
• discussion
• exploit
• solution
• references

ARJ 'decode.c' Local Buffer Overflow Vulnerability

ARJ is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks.

Local attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.