Launchpad.net

CVE 2015-0556

Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive.

See the CVE page on Mitre.org for more details.