VDB

GCVE-110-MAGEIA-2023-107

GCVE-110-MAGEIA-2023-107
Advisory Published
Vulnetix · Advisory published March 24, 2023
Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames. (CVE-2004-0947) Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote attackers to overwrite arbitrary files via an arj archive with filenames that contain .. (dot dot) sequences. (CVE-2004-1027)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiaunarj0 (affected), 2.65-6.1.mga8.tainted (unaffected), 0 (affected), 2.65-6.1.mga8.tainted (unaffected)—
Mageiapuddletag0 (affected), 2.2.0-4.1.mga9 (unaffected)—

Aliases

CVE-2004-0947CVE-2004-1027

References

Updated unarj packages fix security vulnerability
advisory
Updated unarj packages fix security vulnerability
issue
Updated puddletag packages fix missing require
advisory
Updated puddletag packages fix missing require
issue

Browse GCVE Records

74,147 records in the GCVE database · Updated July 21, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›