CVE Request: arj: free on invalid pointer due to to buffer overflow

[Salvatore Bonaccorso <carnil () debian org>]

Hi

Jakub Wilk reported arj crashing on a ARJ file in [1]. Guillem Jover
pointed out that the nvalid pointer is due to a buffer overflow write
access initiated by a value which is under user control, see [2]. He
prepared as well a patch for this issue[3]. Could assing a CVE for
this issue?

 [1] https://bugs.debian.org/774015
 [2] https://bugs.debian.org/774015#11
 [3] http://git.hadrons.org/gitweb/?p=debian/pkgs/arj.git;a=blob_plain;f=debian/patches/security-afl.patch

Regards,
Salvatore